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ASPs,  what  gives?  Application  service  provider  startups  failed 

to  deliver  and  many  went  belly  up.  But  software  as  a  service  isn't  dead.  PAGE  42. 
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IT  ‘goodies’  get 


closer  scrutiny 
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■  BY  JENNIFER  MEARS 

In  the  heady  days 
of  the  internet  boom, 
corporations  were  in 
a  giving  mood.  Mobile 
phones,  pagers  and 
PDAs  were  handed  out 
as  part  of  new-hire  pack¬ 
ages.  Companies  instituted  PC 
and  Internet  access  giveaway 
programs  to  nurture  more  com¬ 
puter-literate  workers. 

Times  have  changed.  A  tougher 
economy  and  the  events  of  Sept. 
1 1  are  forcing  businesses  to  re¬ 
evaluate  how  they  spend  their  IT 
dollars.  Discretionary  perks  such 
as  PCs,  home  Internet  access  and 


wireless  devices,  not  sur¬ 
prisingly,  are  getting  re¬ 
newed  scrutiny. 

“As  is  the  case  with 
most  things  today, 
the  question  is,  ‘Is 
this  critical  for  you?’” 
says  Zeus  Kerravala,  an 
analyst  with  The  Yankee 
Group.  “We ’re  even  seeing  that 
with  employees  themselves:  Is  the 
employee  critical  —  if  not,  the 
employee  goes.  So,  obviously, 
some  of  the  toys  will  go  as  well.” 

Shortly  after  reporting  its  first 
back-to-back  quarterly  loss  in 
nearly  a  decade  earlier  this 
month,  Ford  Motor  Co. ,  decided 
See  Perks,  page  69 


New  tools  are  on  the  way  to  help  you  clean  up  your 

Storage  mess 


■  BY  DENI  CONNOR 

ORLANDO  —  Storage  vendors 
are  finally  heeding  the  cries  of  en¬ 
terprise  customers  who  want  sin¬ 
gle-view  management  tools  that 
can  corral  their  unruly  collec¬ 
tions  of  incompatible  storage  ar¬ 
rays,  devices  and  applications. 

Whether  these  new  “open  stor¬ 
age  management  frameworks” 
from  the  likes  of  EMC  and  Hitachi 
Data  Systems  will  be  easy  enough 
to  use  to  justify  wide  deployment 
remains  an  open  question,  indus¬ 
try  experts  say 

“All  [storage]  companies  are 
trying  to  do  the  exact  same 


thing,”  says  Dwight  Gibbs,  an  IT 
executive  for  The  Motley  Fool  in 
Alexandria, Va. 

That  rush  to  open  frameworks 


More  online! 

Read  more  about  the  heightened  priority 
of  storage  and  get  links  to  our  breaking 
storage  news.  DocFinder  6680 


Terrorism  spurs  Web  collaboration  effort 


■  BY  CAROLYN  DUFFY  MARSAN 

An  obscure  Web-based  collab¬ 
oration  system  under  develop¬ 
ment  by  the  State  Department 
has  caught  the  eye  of  Wash¬ 
ington  decision-makers  as  a  pos¬ 
sible  solution  to  the  information¬ 
sharing  challenges  that  federal 
agencies  face  in  the  ongoing 
war  against  terrorism. 

The  Overseas  Presence  Inter¬ 


agency  Collaboration  System  was 
designed  in  response  to  the  1998 
bombings  of  US.  embassies  in 
Kenya  and  Tanzania.  Currently  in 
a  prototype  phase,  the  system 
would  provide  leading-edge 
knowledge  management  and  col¬ 
laboration  tools  over  an  intranet 
to  40  federal  agencies  with  over¬ 
seas  operations,  including  the 
Defense  Department,  U.S.  Agency 
See  Collaboration,  page  14 


Network  executives 
share  their  wisdom 


For  the  first  in  our  new  series 
of  network  executive  Q&As, 
we  spoke  with  State 
Department  CIO 
Fernando  Burbano. 

Read  his  thoughts  on: 

•  The  agency’s  massive 
network  overhaul. 

•  The  network’s  role  since 
the  Sept.  11  attacks. 

•  Getting  the  most  bang 
for  your  network  bucks. 


STAN  BAROUH 


should  be  a  boon  for  customers, 
Gibbs  adds. 

“Once  this  software  works,  it 
will  commoditize  the  hardware, 
and  prices  will  fall  through  the 
floor”  he  says.“At  that  point  you’ll 
have  one  pool  of  storage,  and 
you  can  go  to  any  vendor.” 

Among  those  jockeying  to 
meet  this  management  need: 

•  Industry  leader  EMC  —  long 
notorious  for  the  proprietary  na¬ 
ture  of  its  products  —  this  week 
will  debut  three  components  of 
its  new  open  framework  called 
Enterprise  ControlCenter/Open 
Edition.  These  components, 
which  are  part  of  the  company’s 
Automated  Information  Storage 
strategy  will  let  software  vendors 
tie  their  applications  and  hard¬ 
ware  to  the  framework.  They  will 
also  let  IT  managers  discover  stor¬ 
age  resources,  report  utilization 
information  and  automate  the 
replication  and  restoration  of 
data  from  any  storage  device  on 
the  network. 

•  At  last  week’s  Storage  Net¬ 
working  World  conference  in 
Orlando,  Hitachi  unveiled  Hi- 
Command,  which  consolidates 
storage  operations  and  manages 
capacity  on  Hitachi  Freedom  and 
Sun  StorEdge  9900  arrays.  Hi- 
Command  will  manage  other 
vendors’  storage-area  network 
(SAN)  gear  as  well  as  direct-  and 
network-  attached  equipment. 

•  BMC  last  week  announced  en¬ 
hancements  to  its  Patrol  Appli¬ 
cation  Storage  Resource  Manager 
(ASRM)  software  that  include  the 
ability  for  IT  professionals  to 
charge  for  storage  utilization  and 

See  Storage,  page  68 


Introducing  the  Sun  Fire™15K,  the  mainframe-class  server 
for  today’s  networked  data  center. 


Go  beyond  the  mainframe.  Way  beyond. 

Mainframes  have  been  the  standard  in  the  glasshouse  since  the 
70s.  But  with  their  complexity,  closed  technology  and  high  main¬ 
tenance  costs,  mainframes  are  simply  not  designed  for  the  modern 
networked  data  center.  The  Sun  Fire™  15K  server,  on  the  other 
hand,  has  the  power  to  run  the  most  demanding  applications- 
at  a  fraction  of  the  cost  of  a  UNIX®  system  or  mainframe. 


Ah,  the  joy  of  consolidation. 

In  fact,  the  Sun  Fire  15K  server  is  so  powerful,  you  can  consolidate 
multiple  servers  and  rehost  mainframe  applications,  as  well 
as  deploy  new  mission-critical  applications  in  an  open  environment. 
And  unlike  a  mainframe,  the  Sun  Fire  15K  server  easily  integrates 
into  your  existing  architecture.  The  Sun  Fire  15K  server  has  complete 
end-to-end  system  compatibility  with  the  Solaris™/SPARC" 
architecture,  so  you  use  the  same  tools,  applications,  administration 
and  resources  to  deploy  and  manage  it.  No  recoding,  no  retraining 
and  no  expensive  consultants  to  come  in  and  “manage”  it  for  you. 


A  revolutionary  concept  in  data  centers: 
reduced  costs. 

The  result  of  all  this?  A  significantly  lower  total  cost  of  ownership. 
In  the  end,  by  incorporating  the  new  Sun  Fire  15K  server  into  your 
existing  architecture,  you  can  reduce  your  data  center’s  complexity, 
take  control  and  cut  your  costs.  So  take  the  first  step  toward 
liberating  your  data  center-and  your  bottom  line,  www.sun.com 


Product  specifications  (the  rocket  science): 

•  106  CPUs -the  largest  in  a  single  cabinet 

•  1/2  terabyte  memory -run  a  database  in  main  memory 

■  18  domains -for  the  utmost  in  balanced  workloads 

•  4  petabytes  of  storage  -  20x  the  Library  of  Congress 

•  6,400  mainframe  MIPS-3x  the  IBM  z900 

■  5th-generation  fault-isolated  dynamic  system  domains 

•  Sun"  Fireplane  interconnect- maximum  app  performance 

•  Uniboard  design  -  swappable  CPU  and  memory  board 


Independent  software  vendor  support: 

Sun  offers  software  developers  an  unparalleled  open 
and  compatible  architecture  in  which  to  develop 
and  deploy  their  solutions.  This  single  integrated 
system  architecture  allows  customers  to  protect  their 
investments,  leverage  their  existing  skill  sets  and 
staff,  and  increase  their  ROI.  It’s  the  reason  ISVs 
like  BEA  Systems,  i2,  J.D.  Edwards,  Oracle  and 
VERITAS  partner  with  Sun. 


take  it  to  the  n,h 


microsystems 


BUY  A  SERVER  WITHOUT 
THESE  FEATURES,  AND 
YOU'LL  PAY  FOR  IT  EVERY  DAY. 


•  PRE-FAILURE  WARRANTY  Some  manufacturers  only  offer  warranties  to  cover  their 
products  after  they  break.  But  our  warranty  lets  you  replace  components  (like  processors,  memory  or  hard 
drives)  before  they  fail,  saving  you  potential  downtime. 

•  MEMORY  FAILOVER  PROTECTION  When  minor  memory  errors  reach  a  certain 
threshold,  other  servers  fail.  But  ours  can  automatically  copy  memory  contents  and  transparently  switch 
over  to  online  spare  memory,  giving  you  control  over  downtime. 

•  CONSISTENT  SMART  ARRAY  CONTROLLERS  A  new  server  can  mean  tedious 

RAID  controller  configuration.  Our  controllers  make  life  easier  with  consistent  upgradability,  data  transfer 
and  management  tools  between  generations,  saving  time. 


COMPAQ  PROLIANT.  THE  SERVER  THAT  SETS  INDUSTRY  STANDARDS. 

Fact:  a  server’s  purchase  price  is  only  about  20%  of  your  total  ownership  cost.  So  we  engineer  ProLiant  Servers  with  dozens  of  features 
that  save  time  and  wipe  out  management  problems.  Where  other  servers  are  designed  to  be  less  expensive  to  make,  ours  are  actually  less 
expensive  to  use.  And  now  that  we’ve  lowered  our  prices,  it’s  hard  to  make  a  case  for  using  anything  else. 


PROLIANT  DL360 

The  flexible  1U  rack  server  and  Network  Magazine's 
product  of  the  year  2001. 

•  1U  rack  form  factor 

•  Intel®  Pentium®  III  processor  1.26GHz  with 
13BMHz  GTL  bus 

•  Dual  processor  capable 

•  512KB  level  two  ECC  cache 

STARTING  AT:  $2,599 

Or  lease  for  $0  down  and  $81  for  48  months 


PROLIANT  ML370 

High  performance,  flexibility,  and  affordability  for  Web 
hosting,  mail,  file/print  and  small  business  databases. 

•  5U  tower  form  factor  (Rack  conversion  kit  available) 

•  Intel®  Pentium®  III  processor  1.26GHz  with 
133MHz  GTL  bus 

•  Dual  processor  capable 

•  512KB  level  two  ECC  cache 

STARTING  AT:  $2,899 

Or  lease  for  $0  down  and  $90  for  48  months 


PROLIANT  DL380 

Network  World  Fusion:  "the  most  well  thought-out  server 
we've  seen." 

Winner,  Network  World  World  Class  award,  Aug.  2001. 

•  2U  rack  form  factor 

•  Intel®  Pentium®  III  processor  1.26GHz  with* 
133MHz  GTL  bus 

•  Dual  processor  capable 

•  512KB  level  two  ECC  cache 

STARTING  AT:  $3,649 

Or  lease  for  $0  down  and  $113  for  48  months 


pentium  /// 


4-FOR-FREE  FINANCING  — $0  DOWN,  NO  PAYMENTS  FOR  4  MONTHS. 


CALL  1-800-AT-COMPAQ 
or  visit  compaq.com/proliantj 


RGD 


Prices  shown  are  Compaq  prices;  reseller  and  retailer  prices  may  vary.  Prices  shown  are  subject  to  change  and  do  not  include  applicable  state  and  local  sales  tax  or  shipping  to  recipient's  destination.  Financing  available  through  Compaq  Financial  Services  Corporation  (CFSC)  to 
qud'Tied  commercial  customers  in  the  U  S.  Financing  subject  to  credit  approval  and  execution  of  standard  CFSC  documentation.  Monthly  lease  payments  are  based  on  48-month  lease  with  a  fair  market  end-of-lease-term  purchase  option  and  do  not  include  taxes,  fees,  or  shipping 
charges  Customers  may  defer  lease  payments  for  4  months  from  lease  start  date,  to  be  followed  by  44  monthly  payments.  Other  lease  terms  available.  Leases  must  start  between  10/1/01  and  12/31/01  to  qualify.  Other  fees  and  restrictions  may  apply;  CFSC  reserves  the  right  to  change 
or  Lance!  this  program  at  any  time  without  notice  For  hard  drives  GB=billion  bytes  lU»1.75-in.  Consult  the  Compaq  Support  Center  at  1-800-OK-COMPAQ  for  details.  Certain  restrictions  and  exclusions  apply.  ©2001  Compaq  Computer  Corporation  All  rights  reserved.  Compaq,  the 
c  ;>mpaq  logo,  and  Proliant  are  registered  trademarks  of  Compaq  Computer  Corporation.  Inspiration  Technology  is  a  trademark  of  Compaq  Information  Technologies  Group.  LP.  in  the  U  S.  and  other  countries.  Intel,  the  Intel  Inside  logo,  and  Pentium  are  trademarks  or  registered 
tidemarks  of  Intel  Corporation  or  its  subsidiaries  in  the  United  States  and  other  countries.  Other  products  mentioned  herein  may  be  trademarks  of  their  respective  companies.  Compaq  is  not  liable  for  editorial,  pictorial,  or  typographical  errors  in  this  advertisement 
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applications. 
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■  20  Your  Take:  State  Department  CIO  Fernando  Burbano 
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Infrastructure 

■  21  Exploring  10G  Ethernet  and 
beyond. 

■  21  InfoLibria  touts  do-it-yourself 
content  delivery  networks. 

■  22  LindowsOS:  A  little  bit  Linux, 
a  little  bit  Windows. 
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on  WAN  costs. 
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Features 

What  went  wrong  with  ASPs? 

The  dot-com  meltdown  has  led  to  the  demise  of  many  ASP 
start-ups.  But  the  ASP  concept  is  not  dead.  In  fact,  Micro¬ 
soft  and  Oracle  are  now  advancing  the  model.  Page  42. 

The  ABCs  of  videoconferencing 

If  you're  considering  videoconferencing,  this  primer  will 
take  you  through  the  process.  Page  46. 

Windows  XP 

Microsoft's  new  desktop  operating  system  was  officially 
released  last  week.  What  will  it  mean  for  your  network? 

Page  49. 

Tester  s  Choice 

Standard  fare  from  Network  World  Global  Test  Alliance 
member  Tom  Henderson,  Page  52. 
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Audio  Primer 

Check  out  our  newest  audio  primer  on  videoconferencing.  Tune  in  to  learn 
about  the  pros  and  cons  of  ISDN  and  IP  videoconferencing,  and  get  the 
scoop  on  Webcams,  desktop  conferencing,  group  conferencing,  board- 
room  systems  and  more.  DocFinder:  6670 

Forums 

Test  Pilots 

Our  latest  Test  Pilot  review  is  on  the  ImageStream  Internet  Solutions  R1 
router.  Find  out  what  a  user  had  to  say  about  its  shortcomings,  areas  for 
improvement,  and  the  savings  in  time  and  money.  DocFinder:  6671 

NetSmart 

Introducing  Internetworking  with  TCP/IP 

Convergence  is  quickly  coming  to  your  network,  and  TCP/IP  is  at  the 
heart  of  it.  That’s  why  we’re  offering  two  hands-on  courses  in  TCP/IP 
Internetworking.  Each  session  includes  lectures,  labs  and  resource 
materials.  Get  your  team  ahead  of  the  game  with  this  training. 

DocFinder:  6672 
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Flow  does  your  chair  rate? 

Fusion  Executive  Editor  Adam  Gaffin  urges  us  to  take  a 
good  look  at  what  we  sit  on  all  day  —  and  then  check  out 
the  ugly  office  chair  competition. 

DocFinder:  6673 
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Connectivity  advice 

A  user  asks,  “I  have  a  Motorola  Surfboard  cable  modem 
(sb4100)  ll.K.  spec  and  a  Cisco  2501  router  running  11.2 
I  OS.  How  do  I  connect  these  together  and  then  into  my  hub 
to  get  broadband  to  all  my  other  machines  in  my  home?" 
Read  Ron  Nutter's  advice. 

DocFinder:  6674 

Bleeding  Edge 

The  weakest  link  in  the  IP  network  world 
Edge  columnists  Daniel  Briere  and  Beth  Gage  caution  Border 
Gateway  Protocol  to  watch  out.  Here  comes  newcomer  Route 
Control  with  potential  to  level  the  industry  playing  field. 

DocFinder:  6875 
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us,  obviously”  Mashiter  says.  Ennovate’s  Envoy  1600  and  700  switches  were  in  trials  at 
two  other  “major”  customers,  Mashiter  says,  one  of  which  was  to  turn  up  service  in 
February  2002. 

Sting  sings . . .  Microsoft  may  get  stung 

■  Despite  the  glitzy  kickoff  provided  by  rocker  Sting,  Microsoft  may  wind  up  getting 
stung  by  its  release  of  Windows  XP  Gartner  predicts  that  the  operating  system  will  be 
on  only  16%  of  new  Windows  PCs  purchased  by  the  enterprise  in  2002,  while 
Windows  2000  will  be  on  41%.  “Windows  XP  Professional  is  clearly  only  an  incre¬ 
mental  change  from  Windows  2000  Professional,” Gartner  analyst  Michael  Silver  said 
in  a  report.  As  far  as  upgrading  those  PCs  already  installed  in  the  enterprise,  Silver 
wrote,  “Most  enterprises  will  see  little  return  on  investment  upgrading  existing  Win¬ 
dows  2000  machines  to  Windows  XP”  Gartner  also  said  XP  is  unlikely  to  drive  PC 
sales  in  the  last  three  months  of  2001.  Gartner  projects  worldwide  PC  shipments  to 
decline  13%  in  the  fourth  quarter  of  2001  compared  with  the  fourth  quarter  of  2000. 


Dell  undaunted  by  HP- 
Compaq  merger  plans 

■  The  planned  megamerger  be¬ 
tween  Hewlett-Packard  and  Com¬ 
paq  presents  Dell  with  “more  of  an 
opportunity”  than  a  threat,  Dell 
CEO  Michael  Dell  insists.  Dell 
made  the  boast  during  his  key¬ 
note  address  at  the  end  of  his  com¬ 
pany’s  DirectConnect  one-day  user 
conference  last  week.  In  response 
to  a  query  about  whether  Com¬ 
paq’s  planned  merger  with  HP 
threatens  his  company,  Dell  cited 
what  he  termed  the  industry’s 
“interesting  set  of  reactions” to  the 
deal.  He  seized  on  Compaq’s 
sharp  year-over-year  decline  in  PC 
shipments,  announced  last  week 
during  the  company’s  third-quar- 


Good  Bad  Ugly 


Michael  Dell,  Dell  CEO:  "You  can 
expect  well  be  as  aggressive  as  we've 
always  been."  Referring  to  Dell’s  pricing  plans 
for  Clariion  storage  products  it  is  reselling 
through  a  new  agreement  with  EMC. 


Hfiliry  Schacht,  Lucent  CEO:  “Clearly,  we're 
not  yet  where  we  need  to  be,  but  we’ve  built  a  solid  track  record  over  the  last  12  months."  Speaking  to  analysts 
about  Lucent's  latest  financial  results,  which  included  a  whopping  $8.8  billion  loss  for  the  fourth  quarter  and  a 
$16.2  billion  loss  for  the  company's  2001  fiscal  year  ended  Sept.  30. 


Bill  Gates  brings  quite  a  resume  to 
the  table,  but  it  does  not  include  "comedic 
actor" ...  nor  does  he  seem  to  be 
a  natural.  Nevertheless,  the  world's 
most  famous  software  exec  will  play 
himself  on  an  episode  of  "Frasier" 
set  to  air  Nov.  13.  Don't  forget  to 
the  VCR.  > 


ILLUSTRATION  DAN  VASCONCELLOS 


ter  financial  report,  and  on  the  billions  in  market  capitalization 
that  the  two  companies  have  lost  since  they  announced  their 
intention  to  merge. “Somebody  isn’t  happy.  I’ll  give  you  a  hint:  It 
isn’t  us,“  Dell  said. “The  track  record  on  these  large  mergers  and 
consolidations  is  not  good.  We  see  it  as  more  of  an  opportunity 
for  us  than  a  risk.” 

Switch  maker  Ennovate  Networks  closes  doors 

■  Ennovate  Networks,  a  4-year-old  New  England  company  developing  IP  Multi-protocol 
Label  Switching  switches  for  the  edge  of  service  provider  networks,  has  shuttered  opera¬ 
tions.  The  company  failed  to 
raise  additional  funding  and 
ran  out  of  money,  says  lan 
Mashiter.an  Ennovate  founder 
and  senior  vice  president  of 
strategic  marketing.  Ennovate 
rang  up  $81  million  in  fund¬ 
ing  but  has  not  received  any 
additional  funds  since  a  $59 
million  round  in  February 
2000. The  company’s  only  an¬ 
nounced  customer,  PSINet, 
went  bankrupt  earlier  this 
year. “That  was  a  big  blow  for 


NetRatings  to  buy  rival  Jupiter  Media  Metrix 

■  In  a  move  that  will  nearly  double  the  number  of  customers  it  serves,  Internet  analy¬ 
sis  company  NetRatings  plans  to  purchase  competitor  Jupiter  Media  Metrix  in  a  cash 
and  stock  deal  valued  at  approximately  $71.2  million.  Both  companies  measure  audi¬ 
ences  on  the  Internet.  Jupiter  recently  compiled  a  list  of  the  most  heavily  trafficked 
news  sites  after  the  terrorist  attacks  Sept.  1 1,  while  NetRatings  presented  a  study  on 
which  music-sharing  sites  have  benefited  most  from  the  decline  of  Napster.  The  two 
companies  have  been  fierce  rivals  in  the  past.  One  part  of  the  agreement  calls  for  them 
to  take  no  further  legal  action  against  each  other  in  a  patent  infringement  lawsuit  that 
Jupiter  filed  against  NetRatings. 

Netegrity  to  snap  up  portal  provider  DataChannel 

■  Access-management  software  provider  Netegrity,  headquartered  in  Waltham,  Mass., 
says  it  plans  to  acquire  Web  portal  software  provider  DataChannel,  based  in  Bellevue, 
Wash.The  deal  is  valued  at  $54  million.  Netegrity  says  the  purchase  is  intended  to  boost 
its  plans  to  provide  Web  portal-based  security,  identity  management  and  provisioning 
services  to  corporations. 

Lemout  &  Hauspie  fails  to  get  a  reprieve 

■  Speech  technology  vendor  Lernout  &  Hauspie  Speech  Products,  with  dual  head¬ 
quarters  in  the  U.S.  and  Belgium,  was  declared  bankrupt  in  Belgium  last  week  after 
the  commercial  court  there  rejected  the  company's  request  for  bankruptcy  protec¬ 
tion.  Five  liquidators,  appointed  by  the  court,  have  taken  control  of  L&H  and  will 
inventory  the  company’s  assets,  which  will  be  sold  off  to  benefit  creditors.  L&H  did 
not  meet  the  criteria  for  another  period  of  bankruptcy  protection,  the  court  said. 
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Today's  business  execs  are  working  at  home,  on  the 
i  dad,  40  the  office  and  everywhere  In  between. 
kcLWfc.rfct-r  Stieps  you  abreast  of  the  tools  and  techniques 
v .  s  nueU  to  support  your  mobile  warriors. 

1‘. co  to  www.nwfusion.com/net.worker/ 


www.nvfusion.com/net.worker/ 


Inspected  by  our  partners: 


Check  Point  -  ,  ^ 

Software  Technologies  Ud.  Net  work  Appliance*  NETSCREEN 


LAUNDRY  INSTRUCTIONS 


1 .  Install  filter  with  your  firewall, 
cache  engine,  or  proxy  server. 

2.  Forget  about  it. 


Websense  is  the  simplest,  most  transparent  Web  filtering  tool  around. 
And  the  most  recommended.  Ask  your  systems  integrator.  Ask  your 
consultant.  Heck,  call  our  partners  direct.  You'll  find  out  why  Websense 
is  installed  in  companies  as  small  as  50  people,  yet  covers  more 
than  250  Fortune  500  firms.  Comprehensive  reporting.  Automatic 
nightly  updates.  Scalability  up  to  1 00,000  users.  And  filtering  flexibility 
to  satisfy  your  CEO's  every  quirk.  Best  of  all,  it's  self-cleaning.  So  you  won't 
have  to  get  your  hands  dirty. Try  it  at  www.websense.com. 
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McAfee  horns  in  on  Norton  antivirus  turf 


■  BY  ELLEN  MESSMER 

SANTA  CLARA  —  Network 
Associates’  McAfee  division  next 
week  will  unveil  an  updated  ver¬ 
sion  of  its  antivirus  management 
console  that  now  exerts  policy 
control  over  its  main  competitor, 
Symantec's  Norton  AntiVirus. 

McAfees  ePolicy  Orchestrator 

2.5  is  a  management  console  for 
receiving  virus-detection  alerts 
from  both  McAfee  and  Norton 
AntiVirus.  It  can  also  schedule 
virus-signature  updates  and  pol¬ 
icy  enforcement,  such  as  requir¬ 
ing  Norton  or  McAfee  to  run  on 
the  desktop  or  scan  certain 
files. 

Network  managers  say  they 
favor  having  a  single  console  to 
control  Norton  and  McAfee.  For 
Network  Associates,  it’s  a  way  to 
try  to  elbow  aside  its  arch  rival. 

“Yes,  it  is  a  way  to  show  the  use¬ 
fulness  of  having  McAfee  in  orga¬ 
nizations  that  also  have  Norton 


McAfee  ePolicy 
Orchestrator  2.5 


The  McAfee  antivirus  manage¬ 
ment  console  now  manages  the 
competing  antivirus  software, 
Symantec  Norton  AntiVirus,  in 
addition  to  McAfee’s  own. 


McAfee 


THf  VACCINS  WO*  t-BUSJNess 


Inflect  cot  Detected  By  Product  For  Hie  Current  Quarter 

St  arting  Date:  06/29 '200 1 

Infections  Reported:  2330 


Report  Generation  Details 
Root:  directory 
Filter  Group:  directory 
User  sa 

Report  Date/Time:  9/11/2001  8:23:55AM 
Pace:  1 / 1 


McAfee  activity  is  always 
depicted  in  yellow,  and 
Norton  activity  in  red. 
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with  the  hope  we  will  be  pre¬ 
ferred  in  the  future,”  says  Ryan 
McGee,  McAfee’s  group  product 
marketing  manager. 

About  70  million  PCs  run 


McAfee,  although  approximately 
20%  of  McAfee’s  corporate  cus¬ 
tomer  base  also  uses  Norton 
AntiVirus. 

A  third  competitor, Trend  Micro, 


Microsoft,  Sun  propel  Web  services 


■  BY  JOHN  FONTANA 

Microsoft  and  Sun  last  week  tried  to  chip  away 
some  of  the  hype  from  Web  services  by  laying  out 
how  and  when  they  plan  to  deliver  actual  tools  and 
infrastructure  components  for  taking  advantage  of 
the  latest  advance  in  application  technology 

But  experts  still  say  Web  services,  which  are 
designed  to  let  customers  create  and  use  applica¬ 
tions  by  stitching  together  software  components  on 
the  fly,  are  probably  at  least  a  year  away  from  having 
any  major  impact  on  enterprise  network  users. 

“You  can  talk  about  the  hype  and  come  up  with 


examples  of  the  technology  but  what  they  have  to 
do  first  is  arm  developers  who  can  start  building 
Web  services  that  are  real,” says  Evan  Quinn,  an  ana¬ 
lyst  with  Hurwitz  Group. 

Indeed,  Microsoft,  at  its  Professional  Developers 
Conference  in  Los  Angeles,  distributed  the  final 
beta-test  versions  on  two  foundation  components 
of  its  .Net  strategy  for  building  and  executing  Web 
services. 

The  foundation  components  are  Visual  Studio.Net 
and  the  .Net  framework,  both  of  which  Microsoft 
hopes  to  ship  by  year-end.  Visual  Studio.Net  is  the 
development  suite  for  building  Web  services  that 
use  a  set  of  standard  protocols 
based  on  XML,  including  the 
Simple  Object  Access  Protocol 
and  the  Web  Services  Descrip¬ 
tion  Language. 

The  .Net  framework  is  the 
run-time  environment  for  exe¬ 
cuting  Web  services  built  using 
Visual  Studio.Net.  The  frame¬ 
work  also  supports  applications 
written  in  any  one  of  26  devel¬ 
opment  languages. 

“We  use  the  framework  and 
Web  services  to  integrate  systems 
on  the  manufacturing  side  of  our 
business,”  says  Fred  Durham,  CEO 
of  CafePress.com,  which  main¬ 
tains  200,000  individual  online 
storefronts  and  prints  original  lo¬ 
gos  and  artwork  on  T-shirts  offer¬ 
ed  through  those  storefronts. “We 
were  on  Java,  but  we  were  cob¬ 
bling  things  together  so  we  need¬ 
ed  a  framework  to  operate  with¬ 
in.  We  looked  at  WebLogic  and 
See  Web  services,  page  68 
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proposals 
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Microsoft  last  week  unveiled  a  set 
of  XML-based  protocols  for  security 
and  routing  designed  to  extend  the 
Simple  Object  Access  Protocol 

(SOAP).  The  protocols  add  the 
transaction-based  computing 
capabilities  needed  for  Web  services 
to  support  enterprise-class  apps. 

Specifications 

Description 

WS-Security 

Provides  credential  exchange,  message  integrity 
and  message  confidentiality  using  the  World  Wide 
Web  Consortium's  XML  Signature  and  XML 
Encryption  specifications. 

WS-License 

Describes  how  to  encode  X.509  certificates, 
Kerberos  tickets  and  arbitrary  binary  credentials 
for  use  with  WS-Security. 

WS-Routing 

Governs  the  asynchronous  routing  of  SOAP 
messages  over  a  variety  of  transports,  including 
TCP,  UDPand  HTTP. 

WS-Referral 

A  protocol  that  enables  the  routing  path  of  SOAP 
messages  to  be  dynamically  configured. 

had  been  the  only  antivirus  soft¬ 
ware  vendor  to  market  a  manage¬ 
ment  console  to  manage  soft¬ 
ware  other  than  its  own. 

McAfee’s  ePolicy  Orchestrator 

2.5  is  available  for  Windows  NT 
and  2000,  and  requires  the  instal¬ 
lation  of  client  agent  software  on 
Windows  95,  2000,  NT  or  XP  to 
enforce  the  manager’s  policy 
instructions  for  the  desktop 
antivirus  software. The  earlier  ver¬ 
sion  of  Orchestrator  knew  how  to 
recognize  that  Norton  was  run¬ 
ning  on  a  desktop,  but  couldn’t 
control  its  use. 

Orchestrator  can  now  control 
McAfee  and  Norton  equally 
through  one  screen  view.  “Before 
this  utility,  we  were  blind,”  says 
Lance  Fahey  client  systems  spe¬ 
cialist  at  Manpower,  a  personnel- 
services  agency  in  Milwaukee. 

Manpower’s  IT  policy  man¬ 
dates  that  McAfee  antivirus  soft¬ 
ware  be  used  by  7,000  of  its 
employees  in  its  offices  connect¬ 
ed  via  a  frame  relay  network.  But 
Manpower’s  business  also  in¬ 
cludes  1,200  independently 
owned  franchises  that  are 
allowed  to  use  whatever  anti¬ 
virus  software  package  they  | 
choose.  Many  of  those  offices 
buy  Norton  AntiVirus, says  Fahey. 

Fahey  will  add  the  Orchestrator 

2.5  agent  code  to  the  franchise 
offices  on  desktops  with  Norton 
AntiVirus  to  be  able  to  enforce 
virus-signature  updates.“It’s  open¬ 
ing  a  door  for  me  to  see  what’s 
going  on,”  he  says. 

The  ePolicy  Orchestrator  2.5 
costs  $28  per  management  node. 

McAfee:  www.mcafee.com 
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■  THIS  WEEK  S  QUESTION: 

Umang  Gupta  made  a 
name  for  himself  in  the 
database  industry  during 
the  mid-1980s  after 
founding  Gupta  Corp. 
Which  company  does  he 
now  lead  as  CEO? 


Answer  this  and  nrie  additional  questions 
online  and  you  could  win  $500!  Visit 

N«twwt  W*rM  Fusioa  and  enter  2349 
in  the  Search  ^ox. 

www.nwfusion.com 
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What  defines  the  best  in  data  storage  solutions? 
A  system  that  fits  your  space,  storage,  and  budget 
parameters.  A  modular  system  that  scales  from 
540  Gigabytes  all  the  way  to  11  Petabytes. 

A  tape  drive  with  a  precedent-shattering  24MB 
per  second  sustained  transfer  rate.  And  robotics 
proven  over  years  and  years  of  24/7  pounding. 
In  short,  it  takes  Sony. 


Sony  Data  Systems  data  storage  products  have 
long  been  the  choice  where  the  volumes  of  data 
are  vast  and  the  access  demands  are  severe,  such 
as  data  centers,  and  in  online  services,  government, 
broadcasting,  seismology,  and  medicine.  And  Sony 
systems  are  based  on  an  unwavering  commitment 
to  tape  technology.  Our  latest  DTF-2  tapes  store 
up  to  518GB*  And  incorporate  either  an  ultra-wide 
SCSI  or  Fibre  Channel  interface.  And  our  latest 
midrange  automated  tape  libraries  fit  your  space 
requirements  and  your  budget,  not  to  mention 
your  SAN  and  NAS  environments. 

So  if  your  data  storage  requirements  are  more 
demanding  then  ever,  your  choice  is  easier  than  ever. 


if// 

DTF 

Digital  Tape  Formal 


For  further  information  on  Sony 
Data  Storage  Systems,  please  call: 


1-800-829-7669 


www.sony.com/datasystems 


Advanced  Storage  by  Sony  “ 


'518GB  compressed,  200GB  uncompressed 

02001  Sony  Electronics  Inc  AM  rights  reserved  Reproduction  m  whole  or  m  part  without  written  permission  is  prohibited  Features  and 
specifications  subject  to  change  without  notice  Sony,  Advanced  Storage  by  Sony.  DTF  and  the  DTF  logo  are  trademarks  of  Sony 


Sony  DTF '  Data  Storage 
Products:  A  Perfect  Fit 
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Nortel  and 
IBM  get 
chummy 
over  VoIP 

■  BY  PHIL  HOCHMUTH 

Nortel  last  week  said  it  has 
ported  its  call  center  products 
to  IBM’s  application  server  and 
database  platforms  and  has 
tapped  Big  Blue’s  integration 
arm  to  install  those  products 
and  other  Nortel  voice-over-IP 
gear  in  large  companies. 

The  agreement  lets  users  de¬ 
ploying  Nortel’s  Symposium  call 
center  software  use  IBM’s  Web¬ 
Sphere  application  server  and 
DB2  database  to  integrate  other 
IT  resources.  The  partnership 
also  makes  IBM  Global  Services 
Nortel’s  preferred  integrator  for 
installing  IP-based  telephone 
and  call  center  systems. 


IP  gets  the  call 

By  2003,  the  worldwide 
market  for  IP-enabled 
PBXs  will  reach  $1.3 
billion,  with  28%  of  the 
market  going  to  IP  call 
center  installations  in 
enterprises  and  call 
center  application 
service  providers. 

SOURCE  IOC 


Symposium  servers  connect¬ 
ed  to  Nortel  PBXs  or  IP  PBXs 
make  it  possible  to  route  cus¬ 
tomer  calls  to  agents  based  on 
their  skills  (such  as  product 
expertise)  while  delivering  cus¬ 
tomer  data  to  agent  desktops 
from  back-end  customer  rela¬ 
tionship  management  (CRM) 
applications. 

WebSphere,  the  first  applica¬ 
tion  server  to  which  Nortel  has 
tied  Symposium, should  make  it 
easier  for  customers  to  inte¬ 
grate  back-end  CRM  systems 
from  companies  such  as  Siebel 
and  SAP  The  link  should  also 
make  it  possible  to  speed  deliv¬ 
ery  of  customer  information, 
Nortel  says. 

Existing  customers  using  Sym¬ 
posium  on  standard  SQL-  and 
Open  Database  Connectivity- 
compliant  database  servers 
(such  as  Microsoft  SQL  Server 
or  Oracle)  will  still  be  support- 
See  Agreement,  page  69 


Tivoli  aims  to  plug  security  holes 

Company  completes  security  management  portfolio  with  two  products,  upgrade. 


Network 
administrators 
can  manage 
the  online 
lifecycle  of 
users  from 
creation  to 
deletion  with 
this  software. 


■  BY  DENISE  DUBIE 

AUSTIN,  TEXAS  —  IBM  software  subsidiary  Tivoli 
Systems  last  week  unveiled  products  to  automate 
user  approval  and  authorization,  and  help  network 
managers  find  and  plug  security  holes. 

The  company  introduced  Tivoli  Identity  Director, 
software  to  manage  and  automate  user  access  rights 
and  provisioning,  and  Tivoli  Intrusion  Manager,  soft¬ 
ware  that  filters  enterprise  security  events  and  alerts 
net  managers  to  potential  risks.Tivoli  also  enhanced 
its  Policy  Director  authorization  software  to  support 
e-business  applications  from  IBM,  SAP  Plumtree, 

Broad  Vision  and  BEA  Software. 

Hurwitz  security  analyst  Pete  Lindstrom  says  Tivoli’s 
three  releases  address  security  issues  that  have 
slipped  through  the  cracks  to  date.  These  include 
managing  a  user’s  entire  online  life  cycle  from  cre¬ 
ation  to  termination;  handling  security  alerts  and  tar¬ 
geting  potential  threats;  and  managing  authorization 
rights  across  Web  and  legacy  networks. 

“The  dirty  little  secret  in  the  security  world  is  that 
there’s  a  plethora  of  user  accounts,”  Lindstrom  says. 

“Identity  Director  gives  users  the  proper  manage¬ 
ment  capabilities  to  control  who  has  access  to  what 
resources.” 

With  Identity  Manager,  Lindstrom  says,  Tivoli  competes  with 
Access360  and  BMC  Software,  and  Policy  Director  competes  with 


Redback  steps  into 
edge  router  game 

SE  800  takes  on  Cisco,  Juniper,  Unisphere. 


Users,  with 
proper  author¬ 
ization,  can 
access  the 
software  to 
change  or  edit 
their  pass¬ 
words  without 
calling  the 
help  desk. 


■  BY  TIM  GREENE 

SAN  JOSE  —  Redback  Net¬ 
works  is  shipping  a  new  edge 
router  it  claims  can  supply 
99.999%  reliability  which  service 
providers  demand  and  which 
also  is  important  to  large  firms. 

To  accomplish  this,  the  Smart- 
Edge  800  Router  compartmental¬ 
izes  both  hardware  and  software 
to  decrease  the  likelihood  of  an 
entire  router  failing  even  if  some 
elements  go  down. 

The  chassis  has  two  route-pro- 
cessing  cards  that  just  process 
route  updates  and  calculations. 
Packet-forwarding  processors  are 
separate  on  each  line  card  in  the 
chassis.  If  a  route-processing  card 
fails,  each  line  card  can  continue 
to  forward  packets  until  the  other 
comes  online,  says  Ravi  Chandra, 
Redback’s  vice  president  of  IP 
software. 

Software  functions  are  also  sep¬ 
arated.  Each  process  such  as  Bor¬ 


der  Gateway  Protocol  (BGP)  or 
Open  Shortest  Path  First  (OSPF) 
is  a  software  module  and  uses  its 
own  memory  So  if  there  is  a  fail¬ 
ure  of  the  BGP  software  module, 
OSPF  and  protocol  independent 
multicasting  is  unaffected.  BGP 
can  be  restored  without  taking 
the  others  down. 

The  SmartEdge  800  Router  can 
be  used  as  an  edge  router,  taking 
in  access  links  from  individual 
sites  and  aggregating  them  for 
OC-12  or  OC^!8  uplinks  to  the 
core  network. 

Redback  faces  competition 
from  Cisco,  Juniper  Networks  and 
Unisphere  Networks,  says  Zeus 
Kerravala,  a  research  director  at 
The  Yankee  Group.  He  says  the 
Redback  box  might  have  techno¬ 
logical  advantages,  but  the  others 
may  succeed  because  they  offer 
devices  that  span  from  the  edge 
to  the  core  of  major  networks. 
This  could  offer  management 
See  Redback,  page  14 


Having  proper  identification 

Tivoli  Identity  Director  software  automates  the  process 
of  adding,  deleting  and  changing  user  accounts. 
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User  Attributes 
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Net  managers  can  assign  network  and  physical 
resources  to  users  from  a  single  interface. 
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products  from  the  likes  of  Netegrity. 

Identity  Director  software  is  installed  on  a  server  and  comes  with  a 
Lightweight  Directory  Access  Protocol-enabled  database  to  hold  user 
data,  but  it  will  work  with  other  directories. 

When  prompted  from  a  human  resources  application  to  create  a 
user  account,  the  software  will  automatically  assign  the  applications, 
directories,  network,  Web  and  e-mail  tools  the  new  user  can  access. 
The  software  will  also  immediately  deny  access  to  all  those  resources 
when  a  user  account  is  terminated.  It  can  even  send  an  e-mail  alert¬ 
ing  the  appropriate  person  to  deactivate  a  former  employees  identi¬ 
fication  badge,  restricting  access  to  the  company’s  building. 

Tivoli’s  second  new  product,  Intrusion  Manager,  is  a  spinoff  from 
Tivoli’s  Risk  Manager  software.The  company  says  the  stand-alone  soft¬ 
ware  is  designed  for  small  companies  and  is  limited  to  managing  the 
security  on  up  to  20  devices,  including  servers,  firewalls,  VPNs  and 
routers. The  product  gives  users  a  single  console  view  of  all  security 
events  and  alerts  coming  in  on  the  network  from  disparate  sources. 
The  software  correlates  the  alerts  and  can  determine  if  numerous 
events  are  being  generated  from  one  source  of  attack. 

“There  are  all  kinds  of  [intrusion-detection  system]  alerts  happen¬ 
ing,  but  no  one  place  to  make  sense  of  them,” Lindstrom  says.“Tivoli  is 
giving  users  a  place  to  manage  security  events  and  software  to  help 
stave  off  potential  attacks.” 

Intrusion  Manager  also  provides  a  vulnerability  assessment  that 
Tivoli  says  will  help  users  proactively  change  their  networks  to  pre¬ 
vent  attacks  or  plug  security  holes.  The  software  performs  routine 
checks  on  network  devices  and  applications,  looking  for  unpatched 
systems,  and  then  offers  users  possible  resolutions  and  locations  to 
find  the  necessary  patch. The  software  taps  into  a  “security  hole”  data¬ 
base  maintained  by  IBM  that  is  updated  monthly  and  immediately 
when  a  known  virus  is  released. 

Additionally,  the  enhancements  in  Pblicy  Director  3.8  extend  the 
product’s  security  capabilities  from  the  Web-based  applications  and 
systems  into  the  enterprise  network,  Lindstrom  says.  The  added  sup¬ 
port  further  integrates  the  Web  and  legacy  systems  for  the  company 
he  says,  and  provides  one  policy-management  tool  that  works  across 
an  entire  infrastructure. 

All  the  products  are  available  now. Tivoli  Intrusion  Manager  runs  on 
Windows  NT,  Solaris,  Unix  and  Linux,  and  costs  $49,100.  Identity 
Director  and  Policy  Director  are  priced  per  user,  with  discounts  avail¬ 
able  as  the  number  of  users  increases.  ■ 


CHAIN  YOURSELF  TO  THE  NETWORK.  NOT  YOUR  DESK. 

PRESENTING  WIRELESS  MOBILITY  FROM  COMPAQ. 

Compaq  complete  mobility  solutions  allow  your  employees  to  do  their  work.  Even  when  they’re  not  at 
their  desk. The  new  Compaq  Evo™  Notebook  N600c  comes  with  a  Mobile  Intel®  Pentium®  III  processor 
and  an  innovative  MultiPort  for  wireless  networking  capability!  This  means  your  team  can  access  real 
information  in  real  time.  So  now  they  can  check  current  inventory,  track  sales  or  send  e-mail  from  the 
conference  room  or  the  cafeteria.  And  if  they  want  something  even  smaller,  give  them  the  iPAQ 
Pocket  PC  for  PC  functionality  that  fits  in  the  palm  of  their  hands. 

Compaq  Evo'“  notebooks  start  at  $999** 
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Instantis  touts  speedy  Web  apps  rollouts 

In  SiteVVand  3.0,  vendor  is  adding  Web  services  support  to  its  software  palette. 


SiteWand  software  for  sales  management 

XO  Communications  turned  to  Instantis  for  help  processing 
sales  leads,  distributing  them  to  appropriate  sales  reps,  and 
tracking  these  efforts. 

App  server  with 


Web 


■fiS 


Sales  rep 


m 


Sales 

manager 


O  A  site  visitor  submits  a  Web  form  requesting  product  information. 

©  SiteWand  captures  prospect  data  from  the  Web  form  and  stores  it  in 
a  sales-lead  database. 

©  For  the  customer,  SiteWand  generates  an  e-mail  or  Web-based  message 
acknowledging  receipt  of  the  inquiry. 

©For  sales  reps,  SiteWand  sends  notification  e-mails  about  new  sales 
leads  in  their  territory. 


©  For  sales  managers,  SiteWand  reports  on  the  volume  and  status  of 
sales  inquiries. 


■  BY  ANN  BEDNARZ 

SUNNYVALE,  CALIF— A  typical 
trade-off  that  companies  in  the 
market  for  enterprise  software 
face  is  speed  of  deployment  vs. 
degree  of  customization.  Instantis 
says  companies  can  have  both 
with  its  component-based  ap¬ 
proach  to  application  design. 

For  each  customer,  Instantis 


combines  different  database, 
workflow  and  e-mail  messaging 
processes  to  create  customized 
Web  applications  that  address  the 
particular  tasks  a  company  wants 
to  automate,  such  as  sales  or  mar¬ 
keting  functions.These  Web  appli¬ 
cations  capture  information  com¬ 
ing  into  a  Web  site,  store  the  data 
in  a  database  and  then  take  ac¬ 
tion  —  such  as  sending  an  e-mail 


message  —  based  on  user- 
defined  rules. 

Instantis  builds  the  applica¬ 
tions  on  its  SiteWand  platform. 
SiteWand  applications  can  be  in¬ 
tegrated  with  users’  existing  ap¬ 
plications  and  infrastructure. 
And  with  release  of  SiteWand  3.0 
this  week,  Instantis  has  added 
support  for  Web  services  to  its 
development  platform. 

The  building  blocks  of  Site¬ 
Wand  are  what  Instantis  calls 
“engines.”  Each  engine  handles 
a  general-purpose  transaction, 
and  Instantis  links  these  engines 
together  to  create  full  applica¬ 
tions.  An  average  deployment 
consists  of  10  to  50  engines  that 
gather  and  disseminate  cus¬ 
tomer  data. 

The  engines  receive  input  via 
standard  protocols  such  as  HTTP 
Simple  Object  Access  Protocol 
(SOAP),  XML  or  custom  APIs. 
When  a  request  comes  in,  the  en¬ 
gines  can  respond  by  delivering  a 
Web  page  or  e-mail  notification; 
updating  a  database;  performing 
a  processing  function  such  as 
connecting  to  a  credit-card  pay¬ 
ment  gateway;  or  sending  a  SOAP 
XML  or  API  message  to  another 
application. 

With  SiteWand,  companies  pay 
only  for  the  functionality  they 
need,  says  Instantis  CEO  and 
founder  Prasad  Raje.  With  its 
engine-assembly  approach,  In¬ 
stantis  can  deploy  applications  10 
times  faster  than  it  would  take  to 
write  new  code  for  each  applica¬ 
tion,  he  says. 

“It  was  definitely  lightning 
speed,”  says  Brad  Eisenstein,  dir¬ 
ector  of  hosting  sales  operations 
at  XO  Communications,  of  his 
firms  implementation. 

When  the  broadband  services 
provider  approached  Instantis,  it 
had  a  list  of  sales  leads  number¬ 
ing  in  the  hundreds  of  thousands. 
Ten  days  later,  Instantis  delivered 
an  operational  lead  management 
system  that  tracks  and  feeds  leads 
to  XO  salespeople.  Eisenstein  esti¬ 
mates  XO  saved  “tens  of  thou¬ 
sands  of  dollars”  with  SiteWand, 
given  the  time  it  would  have  taken 
internal  staff  to  deal  with  the  mas¬ 
sive  amount  of  data  and  create  an 
interface  to  work  with  it. 

Part  of  the  reason  such  a  rapid 
rollout  was  possible  is  that  Site¬ 
Wand  is  not  tied  to  XO’s  other  cus¬ 
tomer  relationship  management 
applications.  For  now  it  handles 


only  the  task  for  which  it  was 
designed:  to  process  the  volume 
of  sales  leads. 

“What  you  accomplish  [with 
SiteWand]  is  relatively  simple,” 
says  Bob  McCullough,  a 
Hurwitz  Group  analyst.“The  fact 
that  you  can  do  it  in  a  less 
painful  manner  is  where  the 
advantage  is.” 

With  the  addition  of  Web  ser¬ 
vices  support,  SiteWand  users 
can  expand  their  transactional 
boundaries. 

For  example,  a  bank  that  had 
outsourced  some  of  its  sales  ef¬ 
forts  to  a  telemarketing  com¬ 
pany  needed  a  way  to  feed 
qualified  leads  from  the  tele¬ 
marketing  company  back  into 
its  SiteWand-based,  lead-track¬ 
ing  and  salesforce-automation 
system.  Using  Web  services, 
SiteWand  pulled  those  leads  in 
XML  format  from  the  outside 
telemarketing  company’s  sys¬ 
tem  and  into  the  bank’s  system. 

Instantis  is  “pushing  the  enve¬ 
lope  with  XML,”  McCullough  says. 
The  idea  of  being  able  to  dynam¬ 
ically  assemble  a  range  of  Web 
services  from  different  places  is 
not  quite  a  reality  because  there’s 
not  enough  Web  services  content 


available  yet,  he  says. 

SiteWand  3.0  is  available  now 
as  a  hosted  service  or  for  on-site 
deployment.  Pricing  starts  at 
$2,500  per  month  for  five-engine 
hosted  system. 

Instantis:  wWw.instantis.com 


Corrections 


■  The  story  "Russell  keeps 
workers  tuned  with  ERM," 
(Oct.  22,  page  29)  misidenti- 
fied  Russell's  vice  president 
of  special  services.  His  name 
is  Paul  Porter. 

■  The  chart  in  the  story  "A 
flooded  field  for  IPSec-based 
VPNs  is  good  for  users,"(0ct. 
1,  page  47)  should  have  stat¬ 
ed  performance  numbers  for 
the  Cisco  7140  VPN  Router  as 
80M  bit/sec  for  best-case 
packet  flow,  38M  bit/sec  for 
Internet  mix  packet  flow  and 
8M  bit/sec  for  worst-case 
packet  flow.  The  price/per¬ 
formance  ratio  in  dollars  per 
megabit  is  S243.42. 


Shake-up  at  RLX 

Market  downturn  hits  server  blade  maker, 

■  BY  APRIL  JACOBS 

HOUSTON  —  Start-up  server  blade  maker  RLX  Technologies  said 
last  week  it  would  restructure  itself  in  the  wake  of  a  downturn  in 
the  overall  server  market,  and  named  a  new  president  as  part  of 
its  plan. 

RLX  gained  renown  in  the  fast-growing  but  tiny  blade  market  by 
being  the  first  to  ship  products  based  on  Transmeta’s  low-power 
Crusoe  processor.  Server  blades  pack  more 
server  power  into  less  space  than  convention¬ 
al  servers. 

The  company  had  been  led  by  a  team  of 
industry  veterans,  many  of  them  from 
Compaq.  Some  of  that  changed  last  week, 
when  Michael  Swavely,  former  of  president  of 
Compaq’s  North  America  operations, stepped 
aside  as  president  and  COO  and  was  suc¬ 
ceeded  by  Pat  Collins,  formerly  a  vice  presi¬ 
dent  at  Dell.  Gary  Stimac,  also  a  former  exec¬ 
utive  at  Compaq,  will  remain  as  chairman  of 
RLX,  but  a  spokesman  for  RLX  said  Stimac 
would  no  longer  serve  as  CEO.  A  replacement 

has  not  been  named. 

Collins  says  RLX  is  still  in  good  financial  shape  with  “plenty  of 
cash  in  the  bank,”  but  it  was  set  up  to  operate  in  a  much  brighter 
economy.  One  of  its  main  problems  has  been  its  focus  on  selling 
to  service  providers,  a  strategy  that  did  not  turn  out  well  when 
those  players  began  encountering  financial  problems.  Instead, 
says  Collins,  RLX  will  change  direction,  focusing  on  application- 
specific  offerings.  He  did  not  offer  details,  except  to  say  that  RLX 
could  offer  bundles  of  server  blades  with  applications  and  man¬ 
agement  features. 

RLX  isn’t  the  only  company  struggling  in  the  server  market.  John 
Humphreys, an  analyst  with  the  market  research  firm  IDC.says  initial 
estimates  show  third-quarter  server  shipments  fell  2%  worldwide 
compared  with  the  third  quarter  of  2000,  causing  steep  revenue 
declines  of  22%.  In  the  U.S., server  shipments  fell  14%  from  the  same 
quarter  last  year,  causing  a  30%  decline  in  revenue  for  server  makers. 

Humphreys  says  RLX  is  part  of  a  growing  area  in  the  server  market, 
but  one  that  isn’t  growing  as  fast  as  some  would  have  liked.“Any  new 
segment  is  going  to  have  dif¬ 
ficulty'  in  an  economy  like 
the  one  we  have  nowf  he 
says,  noting  that  IT  managers 
may  be  wary  of  investing  in 
new  technologies. 

RLX:  www.rlxtechnologies. 
com 
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Ex-Compaq  exec 
Gary  Stimac  steps 
down  as  RLX  CEO. 
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^4'  4* 


If  your  DNS  is  built  on  a  BIND  directory,  you’re 
counting  on  80s  technology  to  route  all  traffic  in  and  out  of  your 
Web  site.  Which  means  you’re  dropping  as  many  as  1  out  of  every 
1 0  customers,  and  probably  losing  a  fortune  in  lost  sales  and  revenue. 
How  do  you  get  out  of  the  BIND?  Switch  to  UltraDNS.  Our  Managed  DNS 
Service™  bypasses  BIND  altogether  and  guarantees  your  Web  site  100% 
uptime.  Links  will  work  faster,  connections  will  be  failure-proof,  and  you'll 
never  drop  another  customer  because  of  DNS  failure  ever  again.  Better 
yet,  outsourcing  your  DNS  management  with  us  is  so  cost-effective,  it 
practically  pays  for  itself.  So  do  yourself  a  favor,  call  UltraDNS  today. 


Solve  your  BIND  problem — 
call  UltraDNS. 

For  more  information  about  our 
Managed  DNS  Service™  visit  us 
at  wwvv.ultradns.com,  e-rnail  us 
at  sale- •'§' ultradns.com,  or  call 
us  at  1-388-367-4812. 
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International  Web  collaboration  under  way 

The  contract  award  and  pilot  test  for  a  new  Web  system  evolved 
from  the  U.S.  Embassy  bombings  in  Africa. 


August  1998 

Bombings  of 
U.S.  embassies 
in  Kenya  and 
Tanzania. 


January  1999 

An  accountability 
review  board  led  by 
retired  Admiral  William 
Crowe  issues  a  report 
recommending 
improved  information¬ 
sharing  among 
agencies  operating 
overseas. 


i  i  i 


11999 


November  1999 - 

Overseas  Presence 
Advisory  Panel  issues 
a  final  report  recomm¬ 
ending  the  development 
of  a  Web-based  system 
to  support  collaboration 
and  information-sharing 
among  40  agencies 
operating  overseas. 
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April  2001 

State 

Department 
receives  $17 
million  to 
prototype 
and  pilot  an 
interagency 
collaboration 
system. 


2001 


June  2001 

Three 
contractors 
selected  for 
prototype 
phase:  Science 
Applications 
International 
Corp.,  Accen¬ 
ture  and  SRA 
International. 
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September  2001 

Terrorist  attacks  in  New  York  City  and 
Washington,  D.C.  bring  overseas 
collaboration  system  new  visibility. 

October  2001 

Two  Senate  committees,  White  House 
Office  of  Homeland  Security  and  Office 
of  Management  and  Budget,  are  briefed 
on  overseas  collaboration  system. 

January  2002 

Winning  contractor 
to  be  selected. 
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May-September  2002 

Collaboration  system  to  be  tested  by  2,400  users  in  Mexico, 
India  and  Washington,  D.C. 


Fiscal  Year  2004 

Collaboration  system  funded  for  rollout.  No  funding  for  system  in  FY03  budget. 


Collaboration 

continued  from  page  1 

for  International  Development 
and  the  Peace  Corps. 

“Today,  you’ve  got  40  agencies 
with  multiple  ways  of  communi¬ 
cating.  It  looks  like  a  spaghetti 
bowl,”  says  Fernando  Burbano, 
CIO  of  the  State  Department 
and  the  lead  architect  of  the 
overseas  Web  collaboration  sys¬ 
tem.  “We  want  to  go  to  a  virtual 
knowledge  management  system 
that’s  secure.  It’s  going  to  be 
available  at  the  classified  and 
unclassified  levels.” 

The  overseas  Web  collaboration 
system  entered  the  limelight  this 
fall  after  the  worst  terrorist  attacks 
ever  in  the  U.S.  State  Department 
officials  say  this  system  is  the  fur¬ 
thest  along  in  terms  of  providing 
the  level  of  interagency  coordina¬ 
tion  needed  to  respond  to  new 
threats  such  as  the  recent  out¬ 
break  of  anthrax. 

“The  requirement  for  intera¬ 
gency  collaboration  and  coope¬ 
ration  is  paramount,  not  just 
overseas  but  domestically"  says 
Anthony  Muse,  deputy  CIO  of 
the  State  Department.  “Our  pro¬ 
ject  has  been  in  the  works  for  a 
year  and  half.  We’re  not  a 
Johnny-come-lately” 

In  recent  weeks,  Burbano  has 
briefed  two  Senate  committees, 


Redback 

continued  from  page  10 

advantages  that  override  the  fea¬ 
tures  of  the  Redback  gear. 

The  SmartEdge  800  Router  also 
needs  to  support  services  such  as 
IP  VPNs  and  firewalls  so  that  ser¬ 
vice  providers  can  use  it  as  more 


the  White  House  Office  of  Home¬ 
land  Security  and  the  Office  of 
Management  and  Budget  on  the 
design  and  status  of  the  overseas 
Web  collaboration  system.  While 
this  system  was  designed  for 
counterterrorism  initiatives,  it  also 
supports  crisis  coordination,  law 
enforcement,  trade  relations  and 
human  rights  efforts. 

“Even  though  [this  system]  is 
for  foreign-affairs  agencies,  it’s  the 
same  40  agencies  that  need  to 
communicate  domestically  Bur¬ 
bano  says.  “The  same  software 
and  hardware  could  be  used.” 

The  CIOs  of  the  10  primary  for¬ 


eign-affairs  agencies  drafted  the 
architecture  and  requirements 
for  the  overseas  Web  collabora¬ 
tion  system.  The  system  was 
funded  last  April,  when  Sec¬ 
retary  of  State  Colin  Powell  allo¬ 
cated  $17  million  for  a  prototype 
and  pilot  test  of  the  system  as 
part  of  his  agenda  to  upgrade 
the  State  Department’s  network 
infrastructure. 

In  June,  the  State  Department 
awarded  three  contracts  to  pro¬ 
totype  the  Web  collaboration  sys¬ 
tem.  The  winning  contractors 
were  Science  Applications  Inter¬ 
national  Corp.  (SAIC),  which 


Redback’s  SmartEdge  800  Trans¬ 
port.  It  has  14  slots,  and  the 
SmartEdge  800  Router  uses  two 
slots  for  redundant  route-proces¬ 
sor  cards  and  12  for  line  cards. 
The  line  cards  each  have  switch¬ 
ing  capacity  and  forwarding 
tables,  and  each  card  is  con¬ 
nected  to  all  the  others  via  a  pas¬ 
sive  backplane. 

Redback  uses  its  own 
network  processor  with 
application-specific  inte¬ 
grated  circuits  to  support 
speed  and  the  ability  to  re¬ 
program  the  device  to  sup¬ 
port  new  protocols.  A  fully 
loaded  chassis  has  a 
switching  capacity  of  60G 
bit/sec. 

Redback  is  shipping 
100M  bit/sec  and  1G 
bit/sec  Ethernet  cards  as 
well  as  OC-48,and  concate¬ 
nated  OC-3  and  OC-12 
cards. 

Price  for  the  chassis, 
route  processor  and  two 
line  cards  is  about 
$150,000  and  can  cost 
more  than  $800,000  for  a 
fully  loaded  box. 

Redback:  www.redback. 
com 


teamed  with  Pricewaterhouse- 
Coopers;  SRA  International, 
which  teamed  with  IBM;  and  Ac¬ 
centure,  which  teamed  with  Gen¬ 
eral  Dynamics  and  Booz-Allen  & 
Hamilton. 

The  State  Department  plans  to 
select  a  winning  contractor  in 
January  and  to  conduct  a  five- 
month  pilot  test  of  the  system  at 
posts  in  Mexico  and  India  starting 
in  May  The  pilot  test  will  include 
2,400  users  from  the  State  Depart¬ 
ment  and  other  agencies. 

The  State  Department  will  run 
the  Web  collaboration  system  on 
its  OpenNet  Plus  architecture, 
which  consists  of  30,000  Pentium 
desktops  and  servers  running 
Windows  NT.  The  system  will 
support  document  sharing,  in¬ 
stant  messaging,  chat  rooms, 
whiteboarding  and  advanced 
searching. 

“The  big  thing  here  is  knowl¬ 
edge  management. This  isn’t  just 
a  network,”  Bur¬ 
bano  says.  “What  is 
knowledge  man¬ 
agement?  In  my 
view,  it’s  getting  the  right  infor¬ 
mation  to  the  right  people  at  the 
right  time  regardless  of  their 
location  to  support  decision¬ 
making  in  a  distributive  fashion.” 

The  system  will  let  users  create 
communities  of  interest  across 
agencies.  Users  from  outside  the 
State  Department  will  access  the 
system  via  a  Web  browser,  and  the 
system  will  be  secured  with  pub¬ 
lic-key  encryption,  firewalls  and 
intrusion-detection  software. 

“Why  do  we  need  knowledge 
management  at  overseas  posts 
or  domestic  locations?  It’s  im¬ 
portant  because  people  rotate, 
and  we  lose  know-how.  We’ve  got 
to  capture  best  practices.  And 
we  need  to  find  who  else  is 
working  on  something  and  who 
has  the  expertise,”  Burbano  says. 


A  classified  version  of  the 
overseas  Web  collaboration  sys¬ 
tem,  also  under  development, 
will  use  the  same  hardware  and 
software  as  the  prototypes, 
Burbano  says. 

Industry  bidders  say  the  system 
is  at  the  forefront  of  applying 
knowledge  management  and  col¬ 
laboration  techniques. 

“We  do  our  own  knowledge 
management  here,  but  we’re 
pushing  the  envelope  with  what 
we’re  doing  in  the  State  Depart¬ 
ment,”  says  Meg  McLaughlin,  a 
partner  at  Accenture. 

“They  are  focusing  on  the  use 
of  commercial,  off-the-shelf  soft¬ 
ware,  and  they  are  making  the 
commitment  to  modify  their  bus¬ 
iness  practices  instead  of  modi¬ 
fying  software,”  she  adds. 

Dean  Thorsell,  vice  president  of 
SAIC,  says  most  federal  agencies 
only  have  basic  collaboration 
tools  such  as  e-mail.  “Just  having 
access  to 
shared  docu¬ 
ments  over  the 
Web  is  some¬ 
thing  that  really  takes  [users]  to 
the  next  step,”  he  says. 

Industry  sources  say  the  over¬ 
seas  Web  collaboration  system 
could  cost  from  $30  million  to 
more  than  $100  million,  depend¬ 
ing  on  the  number  of  software 
tools  selected  and  how  they  are 
deployed. 

Deployment  is  not  funded 
until  the  government’s  2004  fis¬ 
cal  year,  which  begins  in 
October  2003.  But  State 
Department  officials  say  they 
could  move  up  the  schedule  if 
money  is  allocated  sooner. 

“If  [Congress]  moved  up  some 
money  to  this  year  and  to  FY03, 
maybe  we  could  speed  up  the 
worldwide  deployment,"  Burbano 
says.  “Those  things  are  being 
looked  at.”B 


than  just  an  aggregation  device, 
and  that  is  where  reliability  will 
come  into  play  he  says.  If  the  box 
directly  connects  with  users’  net¬ 
works,  a  failure  would  mean  ser¬ 
vice  outages.  “Edge  routers  have¬ 
n’t  been  known  for  their  reliabil- 
iity”  he  says. 

The  chassis  is  the  same  as 


Redback  Networks’  SmartEdge  800 
Router  claims  99.999%  reliability  by 
virtue  of  software  that  processes 
routing  protocols  in  separate  mod¬ 
ules  so  failure  of  one  module 
doesn’t  affect  the  others.  Packet 
processing  hardware  is  also  seg¬ 
regated  to  keep  the  box  running. 


Separate  packet¬ 
forwarding  processors  on 
each  line  card  can  con¬ 
tinue  forwarding  packets 
when  a  router  processor 
card  fails  until  the  backup 
comes  online. 


Redback  shoots 
for  reliability 


These  redundant  route 
processor  cards  perform 
route  calculations  and 
route  updates  only. 


Get  more  information  online. 

Finder:  6677 
www.nwfnsien.com 
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GIGABIT  ETHERNET,  SONET,  ATM.  SHOOT,  IF 
YOU  WANTED  A  NETWORK  MADE  OF  HAM, 
WE  COULD  PROBABLY  CONNECT  TO  IT. 


Not  just  connect  to  it,  but  deliver  profitable  services 
over  it.  At  Riverstone  Networks!'  our  RS  family  of  routers 
delivers  wire-speed  metropolitan  area  services  over 
any  network,  including  Gigabit  Ethernet,  10-Gigabit 
Ethernet,  SONET/SDH,  ATM,  WDM.  TDM.  and  cable. 
In  fact,  Riverstone  routers  convert  raw  bandwidth  into 
profitable  services  in  all  parts  of  the  Metropolitan  Area 
Network.  Whether  it's  dynamic  bandwidth  provisioning. 
MPLS-based  VPNs,  tiered  services,  or  anything  in 
between,  Riverstone  customers  profit  from  intelligent 
bandwidth  on  both  legacy  and  next  generation 
networks.  All  Riverstone  technology  scales  across  the 
entire  product  line,  from  our  compact  RS  1000  Optical 
Metro  Access  Router,  right  up  to  the  RS  38000.  our 
170  Gigabit  Metro  Core  Router.  To  build  a  network 
that  really  brings  home  the  bacon,  contact  Riverstone 


at  1-877-778-9595.  or  visit  riverstonenet.com/nww. 


Bandwidth  with  Brains 
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When  you  left  the  office  last  night,  you 
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worked  for  a  Midwest-based 
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humming  nicely  along  with  ten  accounts. 
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in  this  morning 


you  were  greeted  by  an  e-mail  announcing  that  you  just  landed  a  new  piece  of  business— which  happens 

to  be  bigger  than  those  same  ten  accounts  combined. 

Whats  at  the  top  of  todays  to-do  list?  Figure  out  how  to  expand  your 
supply  chain  and  create  distribution  channels  to  service  all  of  your  clients  retail 
locations  around  the  world.  And  could  you  do  it  by  tomorrow,  thank  you? 

Hopefully,  you've  got  an  infrastructure  that's  built  on  technology  that 
works  around  your  needs,  not  the  other  way  around.  It  should  be  standards- 
based,  so  you're  limiting  your  risk.  Adaptable,  so  you  can  quickly  adjust  to 
change.  Reliable,  so  you're  up  and  running  without  a  hitch. 

At  HR  we  engineer  infrastructure  that  starts  with  you— your  business, 
your  issues,  your  opportunities.  So  you  can  easily  respond  as  your  business 
expands,  contracts  or  takes  off  in  new  directions. 

Servers  that  are  designed  to  address  the  critical  nature  of  an  always- 
on  Internet  infrastructure.  Software  that  puts  your  entire  network  within  easy 
reach  of  your  keyboard.  Storage  that  enables  you  to  transparently  scale  your 
capacity.  Service  professionals  to  help  you  quickly  design  and  deploy  flexible 
solutions  and  infrastructures.  As  well  as  the  support  resources  to  help  keep 
them  running  24/Z 

HP  infrastructure  solutions  are  based  in  the  real  world  of  business. 
Because  the  last  time  we  checked,  that's  where  we  all  work.  Call  1.800.HPASKME, 
ext.  246.  Or  visit  hp.com/go/infrastructure. 

Infrastructure:  it  starts  with  you. 
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State  Department  CIO  Burbano 
revamps  network  in  time  of  war 

Historically  a  laggard  in  the  use  of  IT,  the  US.  State 
Department  has  embarked  on  a  massive  network 
upgrade  that  will  provide  Internet  access  on  every 
desktop  in  260  embassies  and  consulates  around  the 
world.  The  project  is  coming  none  too  soon,  given  that 
the  State  Department  faces  unprecedented  information¬ 
gathering  challenges  in  the  war  against  terrorism. 
Network  World  Senior  Editor  Carolyn  Duffy  Marsan 
interviewed  CIO  Fernando  Burbano  about  the  status  of 
the  State  Department's  network  upgrade,  how  it’s 
changed  since  Sept.  1 1  and  his  advice  regarding  net¬ 
work  security. 


to  be  representative  of  what’s  happening  out  there. 

How  has  your  network  upgrade  effort  changed  since  Sept  11? 

We  were  already  accelerated,  and  there’s  only  so  much 
acceleration  you  can  do.  We  cut  [installation]  times  on 
OpenNet  Plus  and  the  classified  LANs.  Originally,  they 
were  scoped  out  to  take  four  to  five  years,  and  we  cut  that 
down  to  18  months  for  OpenNet  Plus  and  24  months  for 
classified  LANs.  Right  now,  we’re  on  schedule.  But  we’re 
trying  to  see  if  we  can  speed  up  even  more. We’ve  already 
maximized  network  security.  We  take  that  very  seriously. 
So  there  wasn’t  any  additional  security  needed. 

How  has  the  State  Department  put  its  upgraded  network  infra¬ 
structure  to  use  since  Sept.  11? 

We’re  able  to  communicate  sensitive  information  at 
30,000  desktops.  We  didn’t  have  that  before.  By  the  end  of 
the  year,  we’ll  have  60  modern  classified  LANs,  where 
we’re  able  to  maximize  the  use  of  other  intelligence  com¬ 
munity  links  and  databases  from  SIPRnet  and  Intellink. 
Plus,  we’ll  have  classified  e-mail.  We’ve  always  had  secure 
voice,  fax  and  cable.  So  we’ve  always  had  secure  commu¬ 
nications  at  every  post.  Now  it’s  just  different  flavors.  At  the 
desktop,  it’s  more  efficient. 


What  is  the  status  of  the  State  Department's  network  archi¬ 
tecture  and  modernization  efforts? 

[Our  current  OpenNet  architecture  consists  of]  the 
30,000  modern  desktops  and  servers  that  are  Pentium- 
based  [and  run]  Microsoft  software.  We  have  Cisco 
routers  and  so  forth.  Those  systems  replaced  approxi¬ 
mately  600-plus  Wang  minicomputers,  the  famous  ones 
we  had  for  almost  30  years. 

OpenNet  was  designed  to  be  an  intranet.  It  has  sensitive 
but  unclassified  information,  and  so  [the  department] 
didn’t  want  to  hook  it  up  to  the  Internet  for  Web  access. 
We  have  Internet  e-mail  capabilities  at  all  30,000  desk¬ 
tops,  but  Internet  Web  access  is  available  on  stand-alone 
PCs  or  stand-alone  LANs,  not  hooked  up  to  OpenNet. 

When  I  came  onboard,  [the  department  was]  prototyp¬ 
ing  to  build  a  separate  network  for  Web  access.  I  took  a 
look  at  the  network  architecture  and  said:  “Yes,  we  do 
have  to  increase  security  because  the  Internet  is  like 
Swiss  cheese.  It’s  got  holes.  And  we  have  to  make  sure  that 
we  mediate  that  risk.  But  we  can  use  a  risk-management 
philosophy  as  opposed  to  a  risk-avoidance  philosophy” 

What  we  did  was  put  out  extra  security  so  we  could 
merge  the  Internet  Web  access  with  OpenNet.  We’re  going 
to  use  the  same  servers,  desktops,  software  and  routers. 
We  don’t  have  to  replicate  any  of  that.  That’s  what  we’re 
doing  with  OpenNet  Plus.  Eighteen  months  from  now  — 
unless  something  unforeseen  happens  like  disruptions  of 
shipments  or  financial  problems  on  [Capitol]  Hill  —  we 
plan  to  upgrade  all  30,000  systems  plus  add  2,000  new 
systems.  Three  organizations  are  in  production:  the  IRM 
Bureau, the  Economic  Bureau, and  we  just  hooked  up  our 
first  overseas  post,  which  was  Nicosia,  Cyprus.  Another  50 
posts  are  in  different  stages  of  cutting  over. 

What  are  you  doing  to  upgrade  your  other  network  infrastruc¬ 
ture,  which  carries  classified  communications? 

We  are  also  upgrading  our  classified  LANs.  We  have  50 
or  so  older  Banyan  LANs  that  allow  classified  e-mail  but 
not  classified  Web  access.  They’re  not  hooked  up  to  the 
Internet,  but  they  act  as  an  intranet  with  a  Web  browser. 
So  you  can  use  SIPRnet  [the  Defense  Department’s  Secret 
IP  Router  Network]  or  Intellink  [the  intelligence  commu¬ 
nity's  classified  network]  We've  been  replacing  [the  old 
lANs]  with  new  classified  LANs.  It's  the  same  platform  as 


OpenNet  —  all  Pentium-based,  running  Microsoft  soft¬ 
ware.  We’ve  had  this  program  under  way  for  two  years,  but 
it  was  very  dependent  on  money  Classified  systems  are 
not  your  typical  off-the-shelf  stuff.  They  need  special 
shielding,  special  cabling,  special  shipments  that  have  to 
be  carried  in  special  ways,  and  special  installation,  all 
requiring  top  secret  and  above  clearances.  It’s  very  expen¬ 
sive.  Secretary  [Colin]  Powell  gave  us  $200  million  to 
complete  our  project  for  classified  LANs.  He  gave  us  $1 10 
million  for  OpenNet  Plus. 

By  the  end  of  this  calendar  year,  we  will  have  approxi¬ 
mately  60  modern  classified  LANs  in  60  posts  overseas. 
Domestically,  we  already  have  it.  In  24  months,  we’ll  have 
new  classified  LANs  at  virtually  every  post. You’ve  got  to 
have  special  physical  requirements  to  put  in  a  classified 
network, and  not  every  building  has  that. So  where  it’s  fea¬ 
sible  and  where  it’s  need¬ 
ed,  we’ll  have  it  with  this 
project. 

Secretary  Powell  has  said 
his  goal  is  for  every  employ¬ 
ee  of  the  State  Department 
around  the  world  to  have 
Web  access.  What  progress 
have  you  made  in  that  area? 

We  have  Web  access  in 
all  embassies  and  bu¬ 
reaus.  I'll  give  you  an 
example:  The  Economic 
Bureau  had  190  OpenNet 
workstations,  which  had 
the  intranet  with  Internet 
mail  only.  They  had  18 
stand-alone  Internet  Web 
access  workstations  that 
were  in  pooled  areas. 

Once  we  upgraded  the 
network  security  and 
desktops,  they  went  from 
having  Web  access  capa¬ 
bility  for  18  employees  to 
having  the  full  190  em¬ 
ployees.  So  it  was  a  ten¬ 
fold  increase.  That’s  going 


Before  your  arrival  as  CIO,  the  State  Department  had  a  long 
history  of  being  a  laggard  in  terms  of  IT.  How  did  you  turn  that 
situation  around  and  receive  the  management  and  financial 
support  you  needed  to  conduct  one  of  the  largest  IT  upgrades 
going  on  in  the  federal  government? 

You  have  to  get  your  secretary  to  support  you,  which 
wasn’t  hard  for  me  because  Secretary  Powell  is  an  avid  IT 
supporter.  Before  he  came  here,  he  was  on  the  board  of 
directors  at  AOL.  He’s  a  big  user  himself.  He’s  got  his  own 
laptop.  He’s  got  DSL  at  home.  He  does  online  banking 
transactions  and  trades.  So  we  have  an  IT-interested  and 
savvy  secretary  who  knows  the  importance  of  IT.  Also,  at 
the  Pentagon,  he  was  a  big  supporter  of  IT. 

Your  network  infrastructure  budget  is  being  doubled  this 
year.  How  do  you  ensure  the  money  is  well-spent  and  there  is 

See  State  Department  page  69 


Organization: 

Responsibilities: 


U.S.  State  Department 

Oversees  IT  policy  and  operations  for  an 
organization  with  30,000  employees  and 
260  locations. 


Annual  budget:  $538  million 


IT  staff: 
Tenure: 
Previous  jobs: 


Education: 


3,000  (including  contractors) 

Since  May  1998 

Director  of  IS  at  the  National  Library  of 
Medicine  from  1993-1998:  Director  of  the 
Office  of  Information  Resources  Man¬ 
agement  at  the  Peace  Corps  from  1990-1993. 

MA  in  Public  Admin.,  American  University: 
MS  in  Information  Resources  Mgmt., 
Syracuse  University;  BA  in  Information 
Systems,  Louis  University. 


Follow  Burbano’s  career  path,  which  led  him  to  become  CIO  of  the  State  Department. 
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"Nokia  led  the  parade. ..in  the  firewall/VPN  security  appliance  market." 

-IDC,  June  2001 


"Closer  to  high-availability  nirvana  than  any." 

-Network  World,  December  11,  2000 


"The  Nokia  IP530  is  truly  the  best-of-breed  platform  in  the  firewall  market." 

-Information  Security  Magazine,  September  2001 


"A  formula  for  earning  our  Editors'  Choice." 

-PC  Magazine,  September  25,  2001 


"Easy  to  install  and,  more  important,  easy  to  restore." 

-Network  Computing,  May  14,  2001 


You  don't  have  to  take  our  word  for  it.  Nokia  firewalls  and  VPNs  are  the  preferred  choice  of  IT  departments  and 
third-party  reviewers  everywhere.  To  find  out  more,  visit  us  at  www.nokia.com/internet/na.  Welcome  to  the  real  world. 
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NOKIA: 

ReliabilityH 

and  Real  Cost  ggyj pgg 

Nokia  earned  its  reputation  for  excellence  as  the  world’s  premier  provider  of  mobile  com¬ 
munications,  and  is  now  an  acknowledged  leader  in  Virtual  Private  Networking  as  well. 
According  to  a  June  2001  IDC  study,  Nokia’s  sales  growth  of  430%  was  the  fastest  in  the 
worldwide  firewall/VPN  appliance  market  in  2000. 


Nokia’s  patented  IP  Clustering  technology  has  been 
central  to  the  success  of  its  dedicated  VPN  gateway  lineup. 
Nokia  has  also  partnered  with  best-of-breed  application 
providers  to  deliver  a  full  lineup  of  integrated 
firewall/VPN  appliances.  The  breadth  and  depth  of 
Nokia’s  standards-based  offerings  are  able  to  meet  the 
intranet,  extranet  and  remote  access  needs  of  virtually  any 
organization. 

IP  CLUSTERING  FOR 
UNPRECEDENTED  RELIABILITY 

Nokia’s  patented  IP  Clustering  technology  provides 
unprecedented  levels  of  reliability  and  scalability.  In  a  nut¬ 
shell,  IP  Clustering  allows  multiple  gateways  to  function  as 
a  single  unit,  with  a  single  IP  address. 

■  IP  Clustering  makes  Active  Session  Failover™  possible. 
If  any  gateway  in  a  Nokia  VPN  cluster  becomes  unavail¬ 
able  for  any  reason,  the  remaining  gateways  maintain  all 
active  sessions,  as  well  as  their  related  security  associa¬ 
tions,  seamlessly  and  transparently.  There  is  no  disrup¬ 
tion  in  service,  so  Nokia  gateways  can  be  added  to  or 
removed  from  a  cluster  at  any  time,  for  true  upgrade- 
on-the-fly  convenience. 

■  IP  Clustering  also  delivers  true  Dynamic  Load 
Balancing™  Each  gateway  in  a  Nokia  VPN  cluster  is 
assigned  a  traffic  load  based  on  its  individual  capacity,  so 
Nokia  gateways  of  any  size  can  be  clustered  with  any 
other,  as  required. 

UNPARALLELED  COST  SAVINGS 

VPNs  provide  low-cost  remote  access  to  corporate  net¬ 
works  as  an  alternative  to  expensive  long-distance  calls  and 
dedicated  lines.  Nokia  VPN  solutions  go  several  steps  fur¬ 
ther: 

■  Nokia’s  VPN  Policy  Manager  has  an  intuitive  interface 
that  helps  administrators  organize  complex  IPSec  policies 
and  monitor  intricate  network  topologies.  Policy  changes 


can  be  uniformly  deployed  across  networks  including 
hundreds  of  gateways  and  clients  with  a  single  touch. 

■  Nokia  dedicated  VPNs  integrate  with  existing  invest¬ 
ments  and  support  all  common  Internet  security  proto¬ 
cols  including  Layer-2  Tunneling  Protocol  (L2TP), 


Point-to-Point  Tunneling  Protocol  (PPTP)  and  IPSec. 
They  can  be  used  with  advanced  security  technologies 
like  RSA  SecurlD®  tokens,  smart  cards  and  external 
Certificate  Authorities,  and  will  work  with  next-gener¬ 
ation  IP  products  as  well. 

■  Nokia  VPNs  are  easily  and  rapidly  deployed  in  existing 
networks.  Their  integrated  security  applications  are  pre¬ 
configured  to  facilitate  plug-and-play  installation  by 
nontechnical  personnel.  They’re  even  designed  to  save 
space  in  the  equipment  room. 

■  The  unprecedented  reliability  and  scalability  of  Nokia 
VPNs  means  fewer  emergencies,  as  well  as  reduced 
opportunities  for  downtime  and  lost  revenues. 

With  a  wide  range  of  affordable,  high-performance 
models,  the  Nokia  VPN  gateway  family  helps  companies 
start  small  and  plan  big.  Deployment  is  license-free,  and  as 
corporate  needs  evolve,  Nokia  VPN  clusters  scale  effi¬ 
ciently  to  meet  growing  connectivity  needs. 

Nokia  provides  a  single  point  of  contact  for  global  tech¬ 
nical  problems,  with  First-Call,  Final-Resolution  Support. 
Experienced  experts  are  available  around  the  clock  and 
around  the  world. 

Nokia  dedicated  VPN  appliances  help  enterprises 
everywhere  cut  costs  while  increasing  their  security,  scala¬ 
bility  and  performance.  They’re  always  up  and  running  — 
just  like  your  enterprise  has  to  be. 


www.nokia.com  (1-877-997-9199)  e-mail:  lnternet.na@nokia.com 
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A  powerful  new  VPN  solution 
from  the  leader  in  WAN  connectivity. 


NetVanti 
Internet ! 


The  NetVanta"  2000  Series  from  ADTRAN® 


VPN  gateway  and  firewall 
functionality 

Secure  communication 
over  the  Internet 

Supports  up  to  10  IPSec 
VPN  tunnels 

Network  Address  Translation 
(NAT)  protects  IP  addresses 

Internal  router  supports 
multiple  users 

Data  security  using  Data 
Encryption  Standard  (DES) 
or  3DES 

User  authentication  using 
Internet  Key  Exchange  (IKE) 

Stateful  inspection  firewall 
protects  against  cyber  attacks 

Web-based  configuration 
and  management 


In  choosing  your  VPN  access  solution,  consider  the 
company  that  makes  connectivity  its  business.  The 

NetVanta  VPN/Internet  Security  series  comes  to  you  from 
ADTRAN — a  company  that  sells  more  network  termination 
equipment  across  more  service  technologies  than  any  other 
vendor.  A  company  with  more  than  250  established  products 
for  fast,  reliable  and  economical  enterprise  networking. 

NetVanta  is  a  logical  extension  of  ADTRAN ’s  dynamic 
networking  series,  and  is  one  of  the  most  risk-free  decisions 
you  can  make  for  VPN.  It  carries  the  ADTRAN  reputation  for 
quality,  reliability  and  dependability.  A  reputation  evidenced 
by  leading  market  share  positions  year  after  year.  Whether 
you’re  a  small,  medium,  or  large  business,  NetVanta  delivers 
the  exact  VPN  functionality  you’re  seeking,  backed  by  a 
five-year  warranty  and  great  technical  support. 


Prompt  notification  of 
irregular  network  activity 

Industry-leading  5-year  warranty 

■JpW* — 

Telecommuter 

— . 7  ~ 

Corporate  Site 


ADTRAN.  Ash  for  it  by  name. 


For  a  free  VPN  technology  primer,  visit 
www.adtran.com/vpntech 


•vPNC* 

CERTIFIED 


877.894.4614  Technical  Questions 
877.280.8416  Where  to  Buy 

Experts  choose  ADTRAN1" 
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Let 

Freedom 

Ring 

Securely 


t  the  Interop  show  in  Atlanta  this  past 
September,  I  was  host  of  Network  World  Live 
TV.  My  job  was  to  conduct  short  inter¬ 
views  with  executives  from  more  than  50 
.  At  least  half  of  them  were  selling  security 
technology  and  services. 

On  the  user  side  of  the  equation,  study  after  study 
shows  security  issues  at  or  near  the  top  of  network 
managers’  lists  of  challenges  and  concerns.  Research 
companies,  likewise,  predict  heavy  spending  for  all 
types  of  security  technology.  Market  research  firm 
International  Data  Corp.,  for  example,  says  user  spend¬ 
ing  on  virtual  private  network  (VPN)  firewalls  will 
double  every  two  years  for  the  foreseeable  future. 

Of  course,  the  entire  world  is  more  security  con¬ 
scious  following  the  events  of  this  fall.  But  the  real  rea¬ 
son  behind  this  continued  surge  in  security  spending  is 
the  changing  nature  of  enterprise  IT. 

The  defining  characteristic  of  the  unfolding  e-busi- 
ness  infrastructure  is  the  external  reach  of  enterprise 
networks.  More  and  more  network  users  come  from 
outside  the  walls  of  the  enterprise  —  from  customers 
and  suppliers  in  particular.  This  increasingly  external¬ 
facing  nature  of  networks  makes  systems  more  vulner¬ 
able  to  attack  due  to  the  increased  points  of  network 
entry.  Add  to  this  the  greater  reliance  upon  Internet 
technologies  and  you  have  a  host  of  potential  security 
problems. 

Fortunately,  as  you  will  see  in  the  pages  of  this 
special  report,  your  options  for  securing  the  network 
and  enterprise  data  are  many.  By  all  means,  continue 
building  the  e-business  infrastructure  that  will  create 
freedom  of  data  access  to  internal  and  external  users 
alike.  Just  remember  that  the  price  of  freedom  is 
eternal  vigilance. 


companies 
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RETURN  ON  COMMUNICATIONS 

◄ . 


Your  network  is  what  sparks  your  business.  And  your  business  results.  Maximizing  these  results  is  what 
we  call  Return  on  Communications.  Designing,  building  and  implementing  the  right  networking  solutions 
can  optimize  your  operations  and  applications  for  greater  growth  and  increased  efficiency. 

AT&T  unlocks  the  value  of  your  network. 

No  other  company  has  AT&T’s  unique  combination  of  Skill,  Scale  and  Scope  to  do  this  for  your  business. 

►  36,000  networking  professionals  to  support  you  globally 

►  Best  performing  IP  and  data  networks 

►  Broad  services  portfolio  with  industry-leading  SLAs 

►  Greatest  reach:  59  countries,  850  cities 

ENERGIZING 

YOUR  BUSINESS  FROM  THE  INSIDE  OUT 

Results  that  businesses  rely  on. 

Revitalizing  businesses  from  the  inside  out  is  what  AT&T  thrives  on.  That's  why  today,  four  million  businesses 
all  over  the  world  and  across  every  industry,  put  their  trust  in  AT&T 

►  100%  of  the  FORTUNE  100’" 

►  Top  10  US  Retailers 

►  Top  10  Banks  /  Financial  Services  Companies 

Let  AT&T  help  you  recharge  your  business. 

►  From  local  to  global 

►  From  legacy  to  next  generation  networks 

►  From  self-managed  services  to  fully-managed  solutions 

Find  out  how  AT&T  can  energize  your  business  and  help  you  see  a  higher  return  on  your  communications. 

Call  us  today  toll  free  at  I  866  636-0828  or  visit  www.attbusiness.com/return 


©2001  AT&T. 
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he  shock  and  destruction  of  a  disaster  event”  —  whether  caused  by  a  terrorist  attack,  a  fire  or 
some  natural  calamity  -  tends  to  distract  attention  from  the  actual  work  done  to  recover  busi¬ 
ness  operations  or  mitigate  the  vulnerability  of  organizations  to  potential  disasters  in  the  first 
place.  In  most  companies,  the  job  of  thinking  the  unthinkable  and  preparing  methods  and  strategies 
for  disaster  avoidance  and  recovery  tends  to  fall  on  the  shoulders  of  the  IT  organization. 


Those  involved  in  disaster  recovery  planning  know  that, 
while  every  contingency  cannot  be  anticipated  in  disaster 
recovery  plans,  companies  that  have  plans  in  place  tend  to 
survive  to  do  business  another  day.  And  those  that  don’t  are 
likely  to  disappear  within  five  years. 

Successful  disaster  recovery  is  closely  linked  to  time-to- 
data:  a  metric  describing  how  quickly  networks,  systems, 
applications  and  their  data  can  be  made  available  to  the 
end  users  who  need  them  to  perform  useful  work.  The 
longer  a  company  is  without  its  IT  infrastructure,  the  less 
likely  a  company  is  to  recover  from  an  interruption  at  all. 

Heavy  Investments 
in  Backup 

Worldwide  Backup  Software  Revenues 

(in  millions) 


*  The  total  market  figure  includes  revenues  across  all  operating 
systems,  including  Unix  and  32-bit  Windows  as  well  as 
mainframe  and  others. 


Downtime  costs  mount  quickly,  at  an  average  rate  of  more 
than  SI  million  per  hour  across  all  industry  segments, 
according  to  one  study  by  Stamford,  Conn. -based  Meta 
Group.  Inc.  Recovering  operations  after  one  week  of 
downtime  becomes  virtually  impossible:  the  losses  are  too 
great  for  most  businesses  to  survive. 

Despite  these  realities,  disaster  recovery  planning  is 
often  given  short  shrift  within  businesses.  IT  organizations 
are  held  responsible  for  developing  disaster  recovery  capa¬ 
bilities,  but  often  have  limited  budgets  for 
doing  so  —  a  reflection  of  management’s  view 

that  disaster  recovery  planning  is  an  additional  F've  guidelines 
,  T  for  ensuring 

insurance  expense  that  may  be  cut  during  survjvability 

budgetary  belt-tightening.  In  fact,  in  many  of  mission- 

,  i-  •  v  c  i  critical  systems 

businesses,  disaster  recovery  isn  t  a  formal 

function  at  all,  but  is  subsumed  in  the  systems 
and  network  management  budgets  of  the  IT  group.  There, 
it  rarely  receives  any  special  attention  from  management  - 
until  a  disaster  occurs. 

Whether  disaster  avoidance  and  recovery  planning  is 
given  high  visibility  or  not,  IT  and  network  professionals 
should  keep  the  following  five  guidelines  in  mind  to 
ensure  the  survivability  of  mission-critical  systems  and  the 
business  processes  they  support: 

1GET  PROACTIVE.  Every  decision  made 
■  about  storage  and  server  hardware  acquisitions,  net¬ 
work  design  and  application  architecture  should  consider 
the  possibility  of  unplanned  interruption.  IT  and  network 

>  >  >  Continued  on  page  18 
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100%  of  your  disk  capacity  is  now  usable 
for  storage.  We  call  this  revolutionary  idea 
getting  what  you  pay  for. 


StorageTek 


INFORMATION  made  POWERFUL” 


Advertising  Supplement 


■BWI  1 

■  n  J 


ost  companies  hate  to  admit  their  networks  have 
been  compromised  by  outside  intruders.  But  just 
because  they  don’t  like  to  talk  about  it  doesn’t  mean  it 
doesn’t  happen  (see  By  the  Numbers).  And  when  breach 
es  happen,  they’re  expensive. 


Intrusion  detection 


becomes  critical  in 


an  age  of  increased 


U.S.  businesses  that  participated  in  the  2001  Computer 
Security  Institute/Federal  Bureau  of  Investigation 
Computer  Crime  and  Security  Survey  reported  financial 
losses  of  $377  million  over  a  60-month  period  due  to 
breaches  of  information  security.  And  that’s  only  counting 
the  losses  companies  could  quantify.  Nearly  80%  of  the 
530  companies  reported  financial  loss  due  to  cyber-attacks 
but  only  37%  of  respondents  could  put  a  price  tag  on  their 
losses.  Theft  of  proprietary  information  was  the  costliest 
category,  with  financial  fraud  a  close  second. 

Given  the  potential  harm,  you’d  expect  com¬ 
panies  to  devote  significant  resources  to  keeping 
intruders  out  of  their  corporate  networks.  But 
that’s  often  not  the  case.  In  fact,  until  a  company 
suffers  a  quantifiable  loss,  it  is  unlikely  to  dedicate 
much  in  the  way  of  money  or  personnel  to 
information  security,  says  Frank  Prince,  senior  analyst  in 
corporate  infrastructure  for  Forrester  Research,  Inc.,  in 
Cambridge,  Mass.  “The  consistent  message  we  get  from 
people  who  run  security  is  they  don’t  have  enough  people, 
money  or  time,”  says  Prince. 

U.S.  companies  spent  only  $239  per  $1  million  of  top¬ 
line  revenue  on  security  in  2000,  according  to  Forrester’s 
research.  The  security  market  is  growing  at  a  healthy  com¬ 
pound  annual  growth  rate  of  36%  through  2004,  but  the 
total  amount  of  money  spent  on  security  still  will  not  be 
great,  says  Prince. 


threats  from  outside 

Security  hard-  , ,  -  -  -  ■ 

;  r  the  question  is  how 

ware  and  soft¬ 
ware  purchases 

may  get  a  boost  to  pay  for  it. 
in  the  wake  of 
the  Sept.  1 1  at¬ 
tacks  on  New  York  and  Washington,  D.C.,  since  executives 
are  just  as  jittery  as  anyone  else.  But  that  increased  atten¬ 
tion  on  security  is  unlikely  to  be  sustained,  says  Prince. 
One  reason  for  this  is  the  methods  hackers  use  to  break 
into  networks  are  changing  rapidly,  making  it  hard  to  get 
a  basic  understanding  of  what  is  at  stake  and  how  to  pre¬ 
vent  intrusions.  “It’s  difficult  to  take  a  rational  approach  to 
deciding  how  much  money  to  spend  on  this,”  says  Prince. 

Another  problem:  The  return  on  investment  is  neces¬ 
sarily  always  couched  in  the  negative,  as  in,  “I  could  save 
$x  million  if  I  had  an  event  happen  this  year.”  In  the  after- 
math  of  the  Sept.  1 1  attacks,  the  cost-avoidance  argument 
may  be  compelling  enough,  but  over  the  long  haul,  it  tends 
not  to  be,  he  says. 

BENEFITS  OF  OUTSOURCING 

Jeff  Dow,  vice  president  of  information  security  for  $14  bil¬ 
lion  media  conglomerate  News  Corp.,  has  faced  this  very 
problem.  Responsible  for  security  for  such  news  companies 
as  Fox  Television  and  20th  Century  Fox,  Dow  was  under¬ 
standably  anxious  to  protect  his  data  networks  from  outside 
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"It's  so  hard  to  show  a  return  on  investment 

on  intrusion  detection  [services].  I'm  a  big  fan 
of  outsourcing.  We  would  have  had  to  pay  someone  at  least 
$100,000  per  year  for  this  function. 

And  since  we're  so  big,  I  would  have  had  to  hire  a  staff  of 
10  to  12  of  these  highly  paid  professionals." 

—  Jeff  Dow,  VP  of  information  security,  News  Corp. 


intrusion.  But  hiring  a  dedicated  staff  to  pore  over  Web  logs 
in  real  time  24x7  would  be  cost  prohibitive.  So  Dow  elect¬ 
ed  to  outsource  intrusion  detection  to  a  service  provider. 
For  one  monthly  fee,  the  provider  handles  intrusion  detec¬ 
tion  at  its  location  for  all  News  Corp.  companies.  For  Dow, 
the  solution  was  an  answer  to  his  prayers. 

“It’s  so  hard  to  show  a  return  on  investment  on  intrusion 
detection  [services].  I’m  a  big  fan  of  outsourcing.  We  would 
have  had  to  pay  someone  at  least  SI 00,000  per  year  for  this 
function.  And  since  we’re  so  big,  I  would  have  had  to  hire 
a  staff  of  10  to  12  of  these  highly  paid  professionals,”  he 
says.  Because  News  Corp.  is  such  a  large  company,  the  serv¬ 
ice  provider  agreed  to  give  it  discounts  on  its  service. 

News  Corp.  isn’t  the  only  entertainment  company  to 
outsource  intrusion  detection.  Sony  Pictures  Entertain¬ 
ment  also  decided  to  let  a  service  provider  handle  this 
function.  For  JeffUslan,  director  of  information  protection 
and  security  for  Sony  Pictures,  the  decision  came  down  to 
the  same  sort  of  economic  analysis  that  Dow  performed  at 
News  Corp. 

Hiring  a  highly  qualified  network  professional  to  watch 
over  the  network  around  the  clock  is  a  costly  proposition, 
especially  where  the  risk  is  not  obvious. “It  costs  a  lot  to  hire 
someone  who  will  watch  over  the  shop  at  2  a.m.,”  he  says. 

Having  a  service  provider  handle  intrusion  detection  is  a 
good  option  for  many,  says  Forrester’s  Prince.  This  can  be 
very  effective  if  the  provider’s  service  is  well  integrated 
with  the  company’s  operations.  For  example,  there  needs  to 
be  a  comprehensive  plan  for  what  to  do  if  the  service 
provider  identifies  an  intrusion.  The  company  must  get 
involved  at  that  point  to  safeguard  its  own  data  and  systems, 
he  says.  Information  must  flow  quickly  to  all  potentially 
affected,  including  human  resources,  legal,  public  relations 
and  anyone  else  who  needs  to  help  repair  the  breach.  Both 
customer  and  service  provider  must  be  clear  where  the 
service  provider’s  responsibility  ends  and  the  customer’s 
begins  -  something  that’s  not  always  obvious,  Prince  says. 
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Whether  handled  by  a  service  provider  or  in-house,  the 
most  important  aspect  of  intrusion  detection  is  that  a  com¬ 
pany  learns  from  the  security  incidents  that  happen  and 
incorporates  those  lessons  into  the  overall  security  plan. 
“You  have  to  feed  the  lessons  learned  back  into  your 
ongoing  operations,”  says  Prince,  so  your  intrusion  detec¬ 
tion  system  becomes  more  robust  over  time. 

Paul  is  a  Waban,  Mass. -based  freelance  writer  who  writes  fre¬ 
quently  on  security  issues.  She  can  be  reached  via  e-mail  at  lau- 
renpaul@mediaone.  net. 

BY  THE  NUMBERS 

Percentage  of  companies  using 
intrusion  detection  techniques:  61  % 

Percentage  of  companies  reporting 
unauthorized  use  of  computer  systems 
within  the  last  12  months:  64% 

Number  of  outside  intrusions 
reported  by  companies  in  2001: 


1  to  5: 

41% 

6  to  10: 

14% 

11  to  30: 

3% 

31  to  60: 

1% 

Over  60: 

3% 

Don't  know: 

38% 

The  2001  Computer  Security  Institute/Federal  Bureau 
of  Investigation  Computer  Crime  and  Security  Survey 
examined  530  U.S.  companies’  security  practices.  Of 
those  companies  aware  of  intrusions,  the  greatest  per¬ 
centage  reported  between  one  and  five  incidents  in 
2001. 
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About  Uncommon 


THREATS 


Cisco's  comprehensive  approach  to 
intrusion  protection  leads  the  way. 


etwork  managers  and  enterprise  executives 
share  a  common  challenge  today.  Business 
requirements  demand  that  the  network  be  acces- 
J  sible  to  more  and  more  users,  including  cus¬ 
tomers  and  suppliers  as  well  as  those  users  within  the  com¬ 
pany.  But  opening  the  network  to  these  users  exposes  the 
enterprise  system  to  attack  from  an  ever-widening  array  of 
sources,  particularly  unwanted  intrusions  and  heightened 
insider  threats.  Additionally,  attackers  have  sharpened  their 
skills  using  new  methods  to  penetrate  or  circumvent  tradi¬ 
tional  perimeter  network  security  technologies. 

IT  professionals  have  struggled  to  keep  up  with  the 
competing  demands  of  network  openness  and  network 
security.  Some  have  tried  deploying  a  variety  of  best-of- 
breed  point  solutions.  But  what  they  quickly  find  is  that 
there  is  no  substitute  for  a  comprehensive,  pervasive  net¬ 
work  security  solution  where  the  different  pieces  comple¬ 
ment  one  another,  providing  a  layered  solution. 

Providing  both  threat  identification  and  threat  mitiga¬ 
tion  technology,  the  Cisco  Intrusion  Detection  System 
(IDS)  is  just  such  a  pervasive  solution  for  combating  unau¬ 
thorized  intrusions.  Moreover,  Cisco  IDS  is  a  dynamic 
security  component  of  Cisco’s  end-to-end  security  product 
solution  that  has  been  engineered  from  the  ground  up  to 
support  the  broadest  range  of  network  deployments,  from 
small  businesses  to  the  largest  enterprise  environments. 

Cisco  IDS  is  a  critical  element  of  SAFE,  the  company’s 
best  practices  security  blueprint,  designed  to  launch  e- 
business  into  the  future.  In  practice,  SAFE  determines 
which  network  security  solutions  you  should  deploy 
throughout  your  network  via  custom-designed  modules 
that  simplify  network  security  design,  rollout  and  subse¬ 
quent  management.  The  enterprise  gets  immediate  and 
clear  benefits  from  SAFE  because  the  blueprint: 

■  Provides  a  solid  foundation  for  migrating  to  secure  and 
cost-effective  converged  networks 
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■  Enables  the  cost-efficient  deployment  of  a  modular, 
scalable  security  framework 

■  Delivers  truly  integrated  network  protection  with  the 
highest  level  network  security  products  and  services. 
The  bottom  line  of  this  pervasive  network  security 

blueprint,  in  which  the  different  components  integrate 
with  one  another,  is  a  quicker,  less  expensive  deployment. 
This  translates  into  faster  time-to-market  of  your  e-busi- 
ness  applications  and  the  optimal  return  on  investment  as 
revenues  increase  more  rapidly  from  the  applications. 

It  is  within  this  dynamic  SAFE  blueprint  that  IDS  pro¬ 
vides  pervasive  intrusion  protection.  IDS  takes  a  holistic 
approach  to  intrusion  security,  beginning  with  an  under¬ 
standing  of  the  very  broad  nature  of  attack  techniques. 

Today’s  enterprise  sites  are  a  very  complex  mix  of  sys¬ 
tems  and  platforms.  This  means  the  sites  are  vulnerable  to 
the  full  range  of  attack  techniques,  which  strongly  sug¬ 
gests  a  comprehensive  network  security  and  intrusion 
protection  solution,  such  as  IDS. 

The  IDS  solution  includes  both  network  and  host 
intrusion  detection  components,  with  the  host  component 
protecting  the  servers  against  attacks  on  the  applications 
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The  Cisco  Catalyst  6500  IDS  Module  is  designed  to  integrate  IDS 
functionality  directly  into  the  Cisco  Catalyst  6500  Series  Switches. 
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and  operating  system  (see  Stopping  Them  at  the  Host).  The 
Cisco  IDS  portfolio  provides  devices  spanning  the  net¬ 
work,  switch,  host,  router  and  firewall  infrastructures. 
Offered  as  overlay  technology,  the  network  and  host  sen¬ 
sors  secure  networks  in  a  variety  of  scenarios. 

However,  the  Cisco  IDS  solution  also  incorporates  net¬ 
work-integrated  technology,  such  as  the  Cisco  Catalyst 
6500  IDS  Module  and  software-based  router  and  firewall 
images.  With  key  features  and  characteristics  including 
dynamic  response  capabilities,  scalability  and  performance, 
and  security  visibility,  the  depth  and  breadth  of  Cisco  s  IDS 
make  it  the  industry’s  first  enterprise-scale  intrusion  detec¬ 
tion  system. 

Specifically,  the  recently  released  Cisco  IDS  3.0  software 
for  Cisco  4200  Series  appliances  enables  automatic  distri¬ 
bution  of  signatures  and  rapid  updates  of  attack  signatures, 
as  well  as  provides  a  highly  robust  signature  language 
allowing  customers  to  write  their  own  complex  signatures. 
IDS  Network  Sensor  also  features  active  response  support 
for  the  Cisco  FIX  Firewall  family  and  Cisco  Catalyst  6500 
Series  Switches. 

Cisco  IDS  3.0  answers  the  key  challenge  of  event  mon¬ 
itoring  —  namely  reducing  the  occurrence  of  false  positives 
—  allowing  administrators  to  focus  on  real  alarms.  This 
effectively  reduces  network  administration  costs  because 
staff  can  focus  more  on  real  problems  instead  of  chasing 
down  false  alarms.  Other  key  features  of  IDS  Network 
Sensor  include: 

■  Active  response,  allowing  users  to  configure  sys¬ 
tems  to  automatically  shun  or  eliminate  specific  con¬ 
nections  by  changing  access  control  lists  on  Cisco 
routers,  switches  and  firewalls 

■  Sophisticated  detection  of  network  attacks  uti¬ 
lizing  complex  fragment  reassembly  algorithms,  exten¬ 
sive  web  de-obfuscation  analysis  and  robust  protocol 
decodes  developed  by  Ciscos  renowned  Counter¬ 
measures  Research  Team  (C-CRT)  to  combat  hacker 
and  insider  threats 

■  Unique  protection  against  distributed  denial  of 
service  (DDoS)  attacks  by  detecting  communications 
between  DDoS  agents  and  the  hacker  for  known 
DDoS  tools 

■  Comprehensive  detection  of  application  attacks 
covering  multiple  application  protocols. 

Another  key  element  of  IDS  is  the  Cisco  award-win¬ 
ning  Catalyst  6500  IDS  Module.  This  module  reflects  the 
ongoing  effort  at  Cisco  to  migrate  network  security 
directly  into  the  infrastructure  as  an  intelligent  service 
rather  than  as  an  add-on  component. 

The  Catalyst  6500  IDS  Module  is  designed  to  address 
switched  environments  by  integrating  the  IDS  functional- 
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Stopping  Them 
at  the  Host 

The  host  provides  application  services,  making  it  highly  visible 
on  the  network  and  a  common  target  of  attack.  The  host  also 
presents  some  of  the  most  formidable  security  challenges,  owing  to 
the  sheer  number  of  different  host  platforms,  operating  systems  and 
applications  found  in  the  enterprise  today. 

With  this  threat  in  mind,  the  Cisco  IDS  Host  Sensor,  powered  by 
Entercept™,  identifies  and  blocks  attacks  before  any  unauthorized 
transactions  or  intrusions  can  occur.  Where  other  host  defense  sys¬ 
tems  merely  detect  a  problem,  Host  Sensor  mitigates  potential  dam¬ 
age  because  it  is  preventive  in  nature.  This  key  preventive  feature 
results  in  optimal  system  availability,  which  leads  to  optimal  return 
on  investment  of  the  system  itself. 

"The  Cisco  IDS  Host  Sensor  is  an  important  extension  of  Cisco's 
security  monitoring  and  management  portfolio,  giving  customers 
comprehensive  network  and  host-based  intrusion  detection  capabili¬ 
ties,"  says  Richard  Palmer,  vice  president  and  general  manager  of  the 
Cisco  VPN  and  Security  Services  business  unit.  "It  exemplifies  Cisco's 
continued  commitment  to  provide  customers  with  practical  security 
solutions  for  today's  e-business  demands." 

Host  Sensor  is  installed  on  each  server,  guarding  both  the  operat¬ 
ing  system  and  the  applications  it  supports,  providing  protection 
from  threats  like  Code  Red,  Code  Blue  and  Nimda.  Employing  unique 
interception  techniques,  Host  Sensor's  key  features  include: 

■  On-the-spot  attack  prevention,  due  to  its  ability  to  prevent 
attacks  at  the  system  call  level  before  they  execute 
■  Prevention  of  buffer  overflow  attacks  by  identifying  the  execu¬ 
tion  of  the  injected  code  and  preventing  the  most  commonly 
exploited  vulnerability  from  compromising  the  system 
■  Upgraded  integrity  resulting  from  the  sensor  locking  down  the 
system  by  controlling  access  to  the  system  binaries,  configura¬ 
tion  data  and  other  system  objects. 

Host  Sensor  complements  other  elements  of  the  Cisco  IDS  for  the 
smoothest  integration  of  security  components  offered  by  any  single 
security  provider.  And  as  a  key  component  of  the  Cisco  SAFE  securi¬ 
ty  blueprint,  IDS  represents  the  most  comprehensive  and  pervasive 
answers  to  the  daunting  threats  to  enterprise  systems. 

For  more  information  on  IDS  Host  Sensor,  click  on: 
www.cisco.com/ao/idshost. 

ity  directly  into  the  switch.  This  allows  users  to  monitor 
traffic  directly  off  the  switch  backplane  rather  than  having 
to  utilize  external  SPAN  ports. 

With  other  sensing  platforms  and  network  security 
appliances,  and  security  management  and  monitoring 
options  within  IDS,  Cisco  offers  the  most  comprehensive, 
integrated  intrusion  solution  available.  For  more  informa¬ 
tion  on  IDS  and  the  complete  Cisco  network  security 
solution  set,  click  on  www.cisco.com/go/idssolutionskit. 
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VPN's 

Value  Proposition 

Greater  Than 


Savings 


REDIT  ITS  LOW-COST  VIRTUAL  PRIVATE 
network  (VPN)  and  its  frugal  business  prac¬ 
tices  for  selling  discounted  footwear  in  no- 
frills  brick  and  sheet  metal  stores  for  keeping 
the  DSW  Shoe  Warehouse  chain  on  its  feet. 
The  company’s  Framingham,  Mass.,  store  is  standing  tall  in 
a  once  dense  shopping  forest  where  high  operating  costs 
have  felled  four  once-thriving  major  retail  chains  in  the 
last  two  years. 

For  instance,  the  company  cut  communications  costs  by 
using  the  Internet  to  support  a  dial  VPN  that  transports 


traffic  between  local  DSW  stores  and  parent  Shonac 
Corp.’s  Columbus,  Ohio,  headquarters.  In  addition,  the 
work-in-progress  access  upgrade  to  DSL  at  most  of  its  92 
stores  promises  to  further  streamline  lifeblood  business 
processes  without  additional  spending. 

It’s  this  combination  of  Fred  Bunnell’s  bottom-line-ori- 
ented  network  decisions  and  efficient  spending  practices  by 
the  company  that  have  kept  the  retail  chain  on  track.  For 
example,  the  interior  of  the  vast  DSW  store  in 
Framingham’s  Shoppers  World  mall  features  shoes  dis¬ 
played  atop  brown  cardboard  carton  sleeves  stacked  waist 
high  to  form  the  store’s  48  aisles  in  place  of  expensive 
metal  shelves  and  fixtures. The  result  is  a  recipe  for  holding 
the  line  on  costs  and  avoiding  spending  amidst  a  troubled 
economy. 

IMPROVED  PROCESSES 

“Even  though  we  sold  our  dial  VPN  to  top  management 
purely  as  a  cheaper  alternative  to  the  [Public  Switched 
Telephone  Network]  and  frame  relay,  we’ve  since  found 
that  the  business  value  ofVPNs  goes  beyond  cutting  com¬ 
munications  costs  to  include  improving  cur¬ 
rent  processes,”  says  Bunnell,  VP  of  IT  for  par¬ 
ent  Shonac.  For  example,  having  its  92  stores 
dial  out  through  the  network  hub  in 
Columbus  to  one  nearby  VISA,  MasterCard 
or  American  Express  point-of-presence 
(POP),  rather  than  each  dialing  out  them¬ 
selves  to  the  POPs  closest  to  their  far-flung 
stores  for  credit  card  authorizations  will  save 
a  pile  of  money  —  more  than  enough  to  bankroll  the 
ongoing  installation  of  higher  speed,  dedicated  DSL  access 
pipes  at  its  stores,  he  says. 

DSW  is  paying  $140  per  store  per  month  for  144Kbit/ 
sec  DSL  links  to  the  Internet  instead  of  $420  a  month  per 
store  for  an  end-to-end  56K  frame-relay  connection. 

The  fatter  DSL  pipes,  in  turn,  will  speed  performance  of 
current  and  planned  applications  and  features.  Store  work- 
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"Companies  [that  try]  to  deploy  their  own 
VPNs  will  run  into  difficulties  because  of 
technical  complexities  and  the  lack  of 


skilled  staff.1 


—Jeff  Wilson,  executive  director,  Infonetics  Research,  Inc. 


ers  will  be  able  to  use  the  enhanced  VPN  to  access  the 
company’s  intranet  to  review  corporate  policies  and  proce¬ 
dures  archived  in  a  Web  server.  Bunnell’s  post-upgrade  “to- 
do”  list  also  includes  implementing  an  e-mail  package,  run¬ 
ning  intra-store  phone  calls  over  the  network  and  eventu¬ 
ally  installing  self-service  kiosks  that  provide  store  employ¬ 
ees  access  to  data  in  the  firm’s  human  resources  system. 

DSW’s  homegrown  VPN  provides  IP  Security  (IPSec) 
and  Triple  DES  encryption  for  network  traffic,  even 
though  Bunnell  admits  the  data  traveling  over  the  network 
contains  nothing  extremely  sensitive.  What’s  sensitive, 
however,  is  discussing  the  pros  and  cons  of  DSL  access  to 
the  Internet,  weighing  the  risks  against  the  cost  and  band¬ 
width  benefits.  Yet  Bunnell  remains  committed  to  the 
arduous  effort  because  the  added  capacity  of  DSL  access 
will  support  the  types  of  applications  mentioned  above. 

“Companies  are  under  quite  a  bit  of  pressure  to  cut 
communications  costs,  but  IT  managers  must  also  view  a 
VPN  as  a  foundational  network  infrastructure  that  can  let 
them  support  additional  applications  and  capabilities  that 
add  big  business  value,”  says  Bunnell. 

IT  managers  are  increasingly  seeing  the  benefits  of 
VPNs,  with  worldwide  user  spending  on  VPN  products 
and  services  projected  to  soar  from  $12.8  billion  by  year- 
end  to  $48  billion  in  2005,  according  to  an  Infonetics 
Research,  Inc.  report.  “Strong  growth  in  spending  for 
VPN  services  started  at  the  end  of  2000,  with  much  of  the 
future  growth  coming  from  managed  services,”  predicts 
Jeff  Wilson,  executive  director  for  the  San  Jose,  Calif., 
consulting  and  research  firm. 

Sales  of  dedicated  VPN  hardware  and  software  in  par¬ 
ticular  are  also  showing  solid  increases,  climbing  19%  from 
the  first  quarter  of  this  year  to  $535  million  in  the  second 
quarter,  while  2Q  sales  of  software  and  hardware  firewalls, 
which  are  commonly  used  with  VPNs,  climbed  12%  to 
$430  million,  according  to  Infonetics. 

One  VPN  adherent  is  Gelco,  Inc.,  a  Minneapolis-based 
firm  that  has  already  migrated  from  a  private-line  network 
to  a  pure  IP  backbone  network  by  signing  up  for  a  fully 
managed  IP  VPN  service  from  a  major  ISP.  The  virtual 
network  connects  the  firm’s  four  sites  as  well  as  two  of  its 
government  customers. 

The  network  goal  was  twofold:  to  avoid  having  its  33- 
person  IT  staff  manage  multiple  network  protocols,  and  to 


increase  security  by  using  IPSec,Triple  DES  and  certificate 
authority  features  from  the  ISP.  Security  was  a  top  issue  as 
Gelco  manages  expenses  and  other  finances  for  its  cus¬ 
tomers,  which  include  government  clients.  And  like  most 
users,  the  firm  also  sought  to  cut  communications  costs. 

The  outsourced  VPN  service  has  enabled  Gelco  to 
achieve  all  three  goals,  reducing  its  monthly  line  and 
administration  charges  by  approximately  35%  to  40%.  The 
firm  pays  a  monthly  lease  for  the  VPN  routers  it  uses  and 
a  monthly  fee  for  the  rest  of  the  VPN  service.  “Our  two 
biggest  priorities  are  reducing  costs  and  increasing  net¬ 
work  security,”  says  Larry  Peterson,  Gelco’s  VP  of  corpo¬ 
rate  technical  services.  He  sold  the  company’s  CEO,  CFO 
and  senior  operations  vice-president  on  the  project. 

Gelco’s  choice  of  a  VPN  service  fully  managed  by  an 
ISP  provides  better  performance  for  file  transfers  run  over 
the  provider’s  IP  backbone  than  was  available  by  the  “best 
effort”  public  Internet  used  by  DSW  and  other  early  VPN 
implemented. 

EASIER  FILE  SHARING 

But  beyond  the  savings  and  added  features  lies  the  core 
business  value  behind  the  decision.  In  Gelco’s  case,  that 
value  was  to  facilitate  file  sharing,  having  found  that  e- 
mailing  design  documents  and  development  specifications 
from  store  to  store  did  not  support  its  goal  of  collaboration 
and  also  wasted  network  capacity  and  disk  space  on 
employees’  PCs. 

“In  lieu  of  buying  a  full-blown  document  management 
system,  we  created  a  central  repository  of  files  on  the  VPN 
that  are  located  at  headquarters  and  remain  at  headquar¬ 
ters,”  explains  Peterson.  “Workers  at  sites  can  access  the 
files  using  the  VPN,  modify  them  and  have  everyone’s 
changes  made  to  the  central  set  of  files  rather  than  having 
multiple  copies  with  differing  changes  being  sent  all  over 
the  place.  We  needed  stringent  version  control  of  the  files.” 

The  ability  to  add  sites  to  the  VPN  quickly  and  simply 
was  another  key  business  benefit.  “We  sold  the  VPN  serv¬ 
ice  as  being  more  flexible  and  easier  to  [connect]  cus¬ 
tomers  than  [with]  our  past  private  line  network,”  says 
Peterson.  “Connectivity  to  a  legacy  network  would  not 
cut  it  for  us  or  them.” 

Beyond  the  initial  decision  to  use  a  VPN  is  how  best  to 
implement  one:  Do  it  yourself  like  DSW  or  outsource  like 
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"Even  though  we  sold  our  dial  VPN  to  top  man¬ 
agement  purely  as  a  cheaper  alternative  to  the 
PSTN  and  frame  relay,  we've  since  found  that 


the  business  value  of  VPNs  goes  beyond  cutting 
communications  costs  to  include  improving  cur¬ 
rent  processes."  — Fred  Bunnell 

Gelco?  An  Infonetics  survey  of  IT  managers  at  240  small, 
medium  and  large  U.S.  and  Canadian  firms  planning  to 
implement  a  VPN  by  2003  shows  that  most  envision 
enlisting  some  outside  help  in  deploying  and  managing 
their  VPNs.  Forty-four  percent  of  respondents  plan  to 
install  VPN  equipment  themselves  and  handle  all  aspects 
of  managing  the  network  internally.  Another  36%  plan  to 
deploy  VPN  equipment  themselves,  but  outsource  some 
aspects  of  design,  installation  and  management  to  a  third- 
party  such  as  a  service  provider.  The  remaining  20%  split 
evenly  between  those  opting  for  managed  equipment 
service  and  those  opting  for  managed  network  service. 

Wilson  predicts  the  “do  it  yourself”  options  will 
become  less  popular,  while  the  number  of  users  choosing 
managed  services  will  increase.  “Companies  [that  try]  to 
deploy  their  own  VPNs  will  run  into  difficulties  because  of 
technical  complexities  and  the  lack  of  skilled  staff.  [Then 
they’ll]  stop  and  look  for  help.” 

Anchor  Pharmacies,  Inc.  decided  from  the  get-go  not  to 
build  its  VPN  from  scratch.  Instead,  the  $38  million 
Hampstead,  Md.-based  chain  signed  up  for  a  dial  VPN 
from  a  top  IP  backbone  provider.  This  service  replaced  its 
one-way,  online  communications  process,  whereby  head¬ 
quarters  polled  stores  weekly  using  a  remote-control  pack¬ 
age  over  the  PSTN.  This  practice  quickly  ran  up  commu¬ 
nications  costs  as  many  stores  are  located  outside  the  firm’s 
local  calling  area. 

Now,  the  virtual  net  supports  two-way  communica¬ 
tions,  and  store  computers  equipped  with  VPN  client  soft¬ 
ware  dial  into  the  service  provider’s  network  to  reach 


applications  resident  on  a  Web  server  behind  the  firewall  at 
corporate  headquarters. The  core  business  value  is  that  the 
VPN  makes  it  easier,  cheaper  and  more  secure  to  collect 
store  data  on  a  daily  rather  than  a  weekly  basis. 

Getting  stores’  sales  data  faster  helps  Anchor  streamline 
the  process  of  feeding  information  into  the  company’s 
accounting,  operations  and  executive  management  sys¬ 
tems.  As  such,  the  company  can  make  quicker  sales  deci¬ 
sions  and  better  control  store  inventory,  says  Anchor  IT 
director  Allen  Armentrout.  “Had  we  stuck  with  the  orig¬ 
inal  process,  we  would  have  needed  to  add  phones, 
modems  and  staff,”  he  says. 

The  goal  of  secure  data,  of  course,  pertains  to  all  of  an 
enterprise’s  users:  remote  users  want  the  same  computing 
experience  that  their  co-workers  in  the  central  office 
enjoy;  and  network  administrators  want  that  experience  to 
mirror  the  level  of  security  enjoyed  behind  the  corporate 
firewall. 

“Even  when  there  is  protection  and  security  at  remote 
sites  for  remote  users,  often  there  is  no  way  of  enforcing 
it,”  says  Stacy  Lum,  chief  technology  officer  of 
InfoExpress. 

To  address  this  need  for  security  enforcement  at  remote 
sites,  InfoExpress  offers  several  solutions,  including  its 
CyberArmor  personal  firewall,  installed  on  individual  PCs. 
CyberArmor  protects  users  from  attacks  on  the  Internet 
by  keeping  intruders  from  using  the  remote  PC  as  a  gate¬ 
way  into  the  corporate  network. 

INTERNATIONAL  SAVINGS 

Those  companies  with  international  sites  stand  to  save 
even  more  with  VPNs,  over  international  frame  relay  con¬ 
nections,  which  are  typically  priced  much  higher  than  in 
the  United  States.  “Using  VPNs  to  connect  sites  abroad  is 
30%  to  90%  cheaper  than  using  frame  relay,”  claims  Jim 
Slaby,  a  senior  analyst  with  Giga  Information  Group,  Inc., 
a  Cambridge,  Mass.,  consultancy.  “It’s  really  a  slam-dunk 
for  frame  and  more  so  for  private  lines.” 

Laird  Technologies,  Inc.,  for  example,  found  that  it 
would  cost  $6,000  to  $10,000  a  month  for  a  frame  relay 
connection  to  tie  a  site  in  France  to  its  headquarters  in 
Delaware  Water  Gap,  Pa.  Jim  Slick,  network  manager  for 
the  $210  million  interference  shielding  products  maker, 
explored  dedicated  Internet  connections  and  learned  that 
for  only  $2,000  a  month,  he  could  get  a  768Kbit/sec 
access  pipe.  The  savings  made  the  decision  easy.  “You’ve 
got  to  love  the  VPN  option,”  he  says.  “The  performance 
has  been  stellar.” 

Wallace  is  a  freelance  technology  writer  based  in  Ashland,  Mass. 
He  can  be  reached  via  email  at  bwallace_ivrite@msn.com. 
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"We  got  all  of  the  business  unit  heads  and  IT 
managers  together  and  compared  notes,  we 

determined  that  buying  platforms  without  considering 
their  recoverability  was  creating  exposures  for  the 
company  that  we  didn't  want." 

— Steve  Beatty,  staff  systems  programming  analyst  at  a  Fortune  500  company 


professionals  should  think  about  how  the  hardware  would 
be  replaced  if  a  disaster  occurred  and  whether  another 
platform  could  be  substituted  in  a  pinch  to  carry  the  load 
until  a  replacement  was  obtained  and  deployed.  With  net¬ 
works,  redundant  carriers  and  redundant  paths  to  data 
should  be  provisioned  for  all  critical  data  paths.  With  appli¬ 
cations,  designs  should  be  simple  and  portable  so  that 
recovering  a  client/server  application  doesn’t  require  a 
one-for-one  replacement  of  the  existing  application  host¬ 
ing  environment. 

Says  Steve  Beatty,  a  staff  systems  programming  analyst 
with  a  Fortune  500  company,  “We  have  only  within  the 
last  year  or  so  been  thinking  about  equipment  acquisitions 
in  terms  of  their  recoverability  [as  a  result  of  a  corporate¬ 
wide  reorganization].  We  got  all  of  the  business  unit  heads 
and  IT  managers  together  and  compared  notes.  We  deter¬ 
mined  that  buying  platforms  without  considering  their 
recoverability  was  creating  exposures  for  the  company  that 
we  didn’t  want.” 

2  GET  REAL.  Disaster  recovery  provisioning 
■  costs  money  and  budgetary  allocations  may  be  in 
short  supply.  It  is  critical,  therefore,  to  allocate  limited 
funds  smartly.  Focus  first  on  disaster  avoidance.  Alarms, 
suppression  systems,  power  protection,  security  provisions 
and  awareness  programs  are  all  key  components  of  a  disas¬ 
ter  avoidance  strategy.  Next  focus  on  the  least  sexy  but 
most  economical  disaster  recovery  technologies,  such  as 
smoke  alarms,  a  sprinkler  system,  uninterruptible  power 
supply,  door  locks,  an  anti-virus  program  and  other  com¬ 
ponents  of  disaster  avoidance  that  will  be  effective  in  pre¬ 
venting  the  lion’s  share  of  losses. 

PROTECT  THE  DATA.  After  personnel, 
■  data  is  a  company’s  most  nonreplaceable  asset. 
While  a  choice  can  be  made  between  redundancy  and 
replacement  strategies  when  it  comes  to  other  aspects  of 
IT  infrastructure,  there  is  no  such  thing  as  data  replace¬ 
ment.  Redundancy  requires,  at  a  minimum,  a  program  of 
tested  tape  backups  and  secure  off-site  storage.  Be  aware, 
however,  that  tape  and  disk  capacities  are  growing  “out  of 
sync”  with  each  other.  At  a  recent  storage  conference  in 
Chicago,  Nick  Janakas,  an  IT  project  manager  with 
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Motorola  Corp.  in  Arlington  Heights,  Ill.,  complained, 
“The  tape  manufacturers  and  the  disk  manufacturers  no 
longer  seem  to  check  with  each  other  to  ensure  that  tape 
can  effectively  back  up  disk  storage  platforms,  which  are 
growing  into  the  multiple  terabyte  range.” 

The  length  of  time  and  network  bandwidth  required  to 
backup  to  tape  is  often  a  focus  of  IT  and  network  man¬ 
agers,  but  data  restoral  is  an  even  bigger  issue.  In  heavily 
virtualized  storage  environments,  file  system  restoral  can 
require  identical  storage  platforms  and  hundreds  of  hours. 
Planners  need  to  understand  their  data  storage  infrastruc¬ 
ture  and  time-to-data  needs  to  determine  whether  they 
can  optimize  tape  backup  strategies  or  must  abandon  them 
in  favor  of  disk-to-disk  copying  or  mirroring. 

LOOK  FOR  DUAL  VALUE.  Making  a 

■  network,  system  or  storage  platform  highly  avail¬ 
able  costs  money.  These  expenses  may  be  more  palatable  to 
management,  however,  if  they  provide  additional  value  to 
the  company  beyond  risk  reduction.  For  example,  a  mir¬ 
roring  strategy  may  be  leveraged  to  make  data  more  read¬ 
ily  available  to  users  at  a  remote  location.  And  redundant 
networks  employed  for  recovery  purposes  could  be 
pressed  into  service  at  peak  times  of  normal  network  use 
to  reduce  congestion  and  improve  throughput.  Whenever 
a  disaster  recovery  provision  can  be  shown  to  have  opera¬ 
tional  value  to  a  company,  it  is  more  apt  to  be  funded. 

TEST,  TEST,  TEST.  Disaster  recovery 

■  planning  is  not  a  project  that  can  be  forgotten 
once  completed,  but  a  process  of  iterative  testing  and 
improvement.  Once  a  strategy  is  defined,  it  must  be  tested. 
Gaps  that  are  uncovered  need  to  be  addressed,  then  the 
strategy  needs  to  be  retested.  Testing  is  ongoing  to  ensure 
that  the  plan  addresses  ongoing  changes  in  technology  and 
in  the  business  processes  being  supported.  Testing  has  the 
additional  value  of  acclimatizing  personnel  to  the  task  of 
behaving  rationally  in  the  face  of  an  irrational  event.  As 
Shakespeare  said,  “All  things  are  ready  if  our  minds  be  so.” 


Toigo  is  an  independent  consultant,  veteran  contingency  planner 
and  author  of  Disaster  Recovery  Planning,  2nd  Edition 
(Prentice  Hall  PTR:  2000). 

NETWORK  CONNECTIONS 


A  Network  World  Spqp ial  Advertising  faction 


CLinKT 

jmarl 

Products  as  Solutions 

Please  visit 

nwfusion.com/linksmart 
for  more  company  information. 


SECURITY 

Product  Showcase 


iafe Express 


CyberArmor  Suite 

InfoExpress,  Inc. 

(650)  623-0260 

www.infoexpress.com 

www.cyberarmor.com 

InfoExpress  is  a  leader  in  enterprise  personal  firewall  and 
remote  access  VPN  solutions.  Policy  enforcement  solutions 
include  CyberArmor  Suite,  an  enterprise  personal  firewall  and 
CyberGatekeeper,  a  system  configuration  enforcer  for  remote 
access  VPN  and  dial-up  users.  CyberGatekeeper  proactively 
audits  and  enforces  the  remote  system  configuration  before 
granting  access  to  the  corporate  network.  InfoExpress  also 
offers  the  VTCP/Secure  VPN  that  transparently  traverses 
firewalls,  NAT  devices,  and  proxy  servers. 


Make  Your  Network  Secure 


Qualys,  Inc. 

(800)  745-4355 
www.qualys.com 

Qualys,  Inc.  is  a  leading  provider  of  network  assessment  and 
monitoring  solutions,  enabling  Managed  Security  Providers, 
security  professionals  and  corporate  customers  to  remotely 
and  automatically  audit  Internet-connected  networks  for 
security  vulnerabilities.  Qualys  is  headquartered  in  Sunnyvale, 
California,  with  offices  in  France,  Germany  and  the  U.K. 


StorageTek 

INFORMATION  maic  POWERFUL' 

StorageTek 

(800)  786-7835 
www.storagetek.com 

For  more  than  32  years,  StorageTek  has  delivered  data  storage 
solutions  to  businesses  and  organizations  worldwide.  We  use 
the  power  of  disk,  tape,  networking,  software  and  global 
service  solutions  to  simplify  storage  management  and  reduce 
storage  infrastructure  costs  —  dramatically.  Most  important, 
we  provide  storage  solutions  that  meet  IT  storage  needs. 


S  EC  U  R  I  T  Y™ 

RSA  Security 

(877)  RSA-4900/(781)  301-5000 
www.rsasecurity.com 

At  RSA  Security,  our  mission  is  to  ensure  the  authenticity  of 
people,  devices  and  transactions  in  both  the  wired  and  wireless 
worlds.  The  RSA  VPN  Security  Portfolio  offers  a  broad  range  of 
products  and  solutions  for  securing  your  VPN,  including  two- 
factor  authentication,  public  key  infrastructure  (PKI)  and  security 
developer  tools. 


smartpipes 


SmartPipes 

(866)  SP-SALES/(650)  232-1700 
www.smartpipes.com 

SmartPipes  offers  IP  software  that  simplifies  the  design, 
deployment  and  management  of  IP  VPN  intranets,  extranet  net¬ 
works  and  security  systems.  Network  administrators  access 
the  SmartPipes  software  via  a  web-based  interface  that  allows 
them  to  dynamically  map  enterprise  business  policies  such  as 
privacy,  security,  access  control  to  corporate  intranets,  and  flex¬ 
ible  extranets  for  business  partners  onto  corporate  networks. 


# 

0 

SSH  Communications  Security,  Inc. 

(650)  251-2700 
www.ssh.com 

SSH  Communications  Security  is  a  world-leading  supplier  of 
solutions  to  secure  Internet  communications.  SSH  IPSEC 
Express™  toolkit  includes  the  market-leading  IPSec  implementation. 
SSH  Secure  Shell  is  the  award-winning,  de  facto  standard  for 
secure  remote  access.  SSH’s  IPVia™  family  of  VPN  solutions 
represents  the  new  generation  of  Virtual  Private  Network 
(VPN)  technology,  featuring  centralized  configuration,  policy 
management  and  distribution. 


NETWORK 


CONNECTIONS 


•  •  •  •  i 

be  made  to  make  this  listing^  complete  and  aft  urate  as  po^ible.  Nettuork  Worfeis  not  lil^le  for  errfts  i 

•  •  •  •  *  *  |  1 


Advertising  Supplement 


-i 


VPNs: 

How  Secure 


BY  STEVE  ULFELDER 

They 


ack  Technologies  is  in  the  early  stages  of  a  VPN  rollout.  “There  are  plenty  of  chal¬ 
lenges,  and  security  is  at  the  top  of  the  list,”  says  Rick  Anselmo,  manager  of  IS  at 
the  Westford,  Mass. -based  contract  manufacturer.  Because  Mack  Technologies  builds  and 
tests  hardware  devices  such  as  servers  created  by  other  companies  —  including  Hewlett- 
Packard  and  Sun  Microsystems  —  “Our  security  issues  are  complicated,” Anselmo  says. “Were  deal¬ 
ing  with  a  lot  of  [other  companies’]  proprietary  information.” 


Virtual  private  networks  are  quickly  taking  hold  as  a  rel¬ 
atively  inexpensive  way  for  enterprises  to  connect  remote 
offices  and  workers.  According  to  a  recent  report  from 
Framingham,  Mass. -based  International  Data  Corp.  (IDC), 
“Enterprises  saddled  with  increasing  network  costs  due  to 
a  jump  in  mobile  usage  are  looking  past  expensive  private¬ 
line  services.  IP-VPNs  used  for  LAN-to-LAN  connections 
are  less  expensive  than  private-line  alternatives.” 

Network  managers  understand  the  cost  benefits  of 
VPNs,  but  many  agree  with  Anselmo  that  security  is  a  key 
concern.  Just  how  secure  are  VPNs,  and  how  can  they  be 
made  more  secure?  Can  IT  managers  rest  assured  that 
VPNs  meet  enterprise  security  demands? 

In  an  illustration  of  the  turbulence  surrounding  VPN 
security,  ANX  [previously  the  Automotive  Network 
Exchange]  —  a  pioneering  VPN  joint  effort  launched  in 
1995  by  U.S.  automakers  —  recently  abandoned  its  multi¬ 
vendor  IP  Security  (IPSec)  strategy;  despite  demanding 
that  its  vendors  test  their  equipment  with  the  Internet 
Engineering  Task  Force  (IETF),  ANX  was  unable  to  over¬ 
come  interoperability  problems  and  now  plans  to  switch 
to  a  single-vendor  approach. 

But  analysts  and  IT  managers  view  this  as  a  typical 
bump  in  the  road  for  unproven  technology,  pointing  out 
that  advances  on  several  fronts  —  authentication,  encryp¬ 
tion,  personal  firewalls  and  security  appliances  —  have  the 
potential  to  make  secure  VPNs  a  corporate  reality,  rather 


than  a  contradiction  in  terms.  “The  technology’s  been 
exposed  to  a  lot  of  threats  recently,  so  weaknesses  have 
shown  up,”  says  independent  technology  consultant  and 
author  Jon  William  Toigo.  "But  the  security  ofaVPN  real¬ 
ly  depends  on  how  it’s  implemented.” 

AUTHENTICATION  OPTIONS 

For  VPNs  to  take  their  place  in  the  enterprise,  better  and 
more  scalable  methods  of  identifying  users  and  applica¬ 
tions  must  emerge.  Sure,  IPSec  protects  tunneled  packets 
against  such  attacks  as  spoofing,  modification, 
and  eavesdropping  —  but  that’s  no  help  if  the 
sender  at  the  other  end  of  the  IPSec  tunnel  is 
an  attacker.  Fred  Avolio,  security  expert  and 
principal  of  Avolio  Consulting  in  Lisbon,  Md., 
says,  “If  even  one  [remote]  office  is  insecure,  all 
a  VPN  gives  you  is  a  secure  office  for  someone 
to  attack  you  from.” 

To  improve  VPN  authentication,  the  IETF’s 
Public  Key  Infrastructure  (PKI)  task  force  and 
many  vendors  are  working  on  such  technolo¬ 
gies  as  digital  certificates  and  directory  servic¬ 
es.  Digital  certificates  are  already  used  to  authenticate  the 
encryption  keys  of  the  endpoints  of  IPSec  networks;  in 
the  future,  though,  the  certificates  will  carry  much  more 
information  about  users.  This,  in  turn,  will  allow  for  more 
detailed,  precise  user  profiles. 
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"If  even  one  [remote]  office  is 

insecure,  an  a  vpn  gives  you  is  a 
secure  office  for  someone  to  attack 

you  from."  -  Fred  Avolio,  principal,  Avolio  Consulting 


Internet  key  exchange  (IKE)  using  pre-shared  keys,  the 
most  frequently  used  verification  method  on  IPSecVPNs, 
works  well  on  smaller  networks  but  doesn’t  scale  well. 
Experts  say  enterprise-grade  networks  demand  the  more 
scalable  public  key  cryptography  —  which,  when  used  on 
a  large  scale,  in  turn  necessitates  PK1  to  issue  and  manage 
X.509  digital  certificates. 

Most  IT  organizations  would  understandably  prefer  to 
use  existing  authentication  technologies,  such  as 
RADIUS,  TACACS+  and  SecurlD,  with  their  remote- 
access  VPNs.  Unfortunately  these  legacy  methods  don’t 
work  well  with  IKE.  The  good  news  is  that  the  IETF  is 
addressing  compatibility  issues  through  XAUTH,  an  IKE 
extension  intended  to  make  room  for  legacy  authentication. 
The  bad  news:  some  have  complained  that  XAUTH  itself  is 
vulnerable  to  man-in-the-middle  attacks.  Jason  Smolek,  an 

analyst  at  IDC,  admits  legacy 
integration  “is  a  tricky  prob¬ 
lem,  and  it’s  likely  to  stay  that 
way  for  awhile.” 

STRONGER 
ENCRYPTION 
COMING 

Vendors  and  some  analysts 
agree  that  enterprises  will 
continue  to  demand  better 
encryption  technology  in 
VPNs.  Today,  that  encryption 
is  usually  based  on  40-  or  56- 
bit  key  lengths.  Both  longer 
keys  and  stronger  encryption 
algorithms  are  in  the  pipeline. 

But  John  Girard,  a  vice- 
president  and  research  direc¬ 
tor  at  Stamford,  Conn. -based 
Gartner,  Inc.,  believes  that  as 
long  as  network  endpoints  are 
wide-area  networks’  weak 
points,  encryption  is  the  least 
of  network  managers’  wor¬ 
ries.  “Sure,  a  VPN  will 
encrypt  traffic,”  Girard  says. 
“The  problem  is,  all  an 
intruder  has  to  do  is  hack  a 


user’s  desktop.  So  why  bother  [to  attack]  all  that  strong 
encryption?”  He  says  businesses  need  to  focus  on  such 
advanced  authentication  techniques  as  smart  cards  and  bio¬ 
metrics  —  as  well  as  on  educating  users  about  security  risks. 

DSL  WEAKNESS 

It’s  ironic  that  broadband  Internet  access,  which  helped 
fuel  the  explosion  of  remote  networks,  is  also  a  crucial 
VPN  security  weakness.  The  always-on  nature  of  Digital 
Subscriber  Line  (DSL)  technology,  used  in  many  small  and 
home  offices,  often  frustrates  network  managers.  “You  can 
build  a  tunnel  between  [a  remote  user  and  headquarters] 
and  be  safe  at  the  corporate  site,”  IDC’s  Smolek  says.  “But 
within  the  user’s  personal  area,  you’ve  got  an  issue.” 

VPN  vendors  have  attacked  the  problem  several  ways. 
One  approach  gaining  popularity  is  the  “personal  firewall” 
—  client-level  software  that  blocks  Internet  ports  and 
detects  intrusion  attempts.  In  addition,  several  vendors 
now  offer  DSL  routers  with  integrated  firewalls. 

SECURITY  APPLIANCES 

To  reassure  network  managers  that  they  can  implement 
secure  VPNs,  many  vendors  have  begun  offering  devices 
generically  called  security  appliances  —  devices  that  bundle 
VPN  capabilities,  a  firewall,  intrusion  detection,  packet 
sniffing  and  more.  IDC’s  Smolek  says  the  appliances  are 
easy  to  install,  and  that  “vendors  also  want  to  reassure  cus¬ 
tomers  that  they  can  get  security-in-a-box.”This  approach 
appears  to  be  catching  on  in  corporate  America;  IDC 
expects  sales  of  IP-VPN  firewall  appliances  to  grow  from  a 
$304.7  million  market  this  year  to  $791.2  million  in  2005. 

When  all  is  said  and  done,  analysts  and  users  have  little 
doubt  that  VPN  security  technology,  while  not  without 
hiccups,  is  ready  for  prime  time.  Gartner’s  Girard  says  that 
building  an  enterprise-quality  VPN  “is  possible,  but  it 
requires  work  and  planning.  A  lot  of  enterprises  aren’t 
doing  what  it  takes.  When  they  look  at  the  scale  and  com¬ 
plexity  of  doing  a  VPN  the  right  way,  they  let  things  go.” 

“I’m  optimistic,”  says  Mack  Technologies’  Anselrno.  “As 
we  continue  to  understand  how  to  make  this  thing  scala¬ 
ble  and  secure,  we’ll  add  more  and  more  users.  There  are 
just  so  many  good  reasons  to  do  a  VPN.”  ■ 


Ulfelder  is  a  freelance  uriter  based  in  Southborough,  Mass. 
He  can  be  reached  at  sulfelder@charter.net. 
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IDC  says  that  security  as  a  barrier 
to  VPN  adopion  is  "eroding  as 
IPSec  has  become  standardized,” 
resulting  in  dramatic  growth  for 
VPNs. 
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Network  Security. 


Sponsored  by  NetworkWorld  and  Enterasys  Networks  •  Wednesday,  Nov.  14  •  1:00  p.m.  (EST) 

Join  NetworkWortd's  John  Callant,  John  Roese,  and  an  information  security  expert  as  we  address  the  latest  technologies  and 
techniques  to  safeguard  your  business  from  the  next  wave  of  cyber-terrorism. 

For  more  information  and  to  register,  please  visit  www.itworld.com/itwebcast/enterasys_security. 


It's  not  just  VPNs. 


It's  not  just  firewalls. 


It's  not  just  Intrusion  Detection. 


It's  being  able  to  sleep  at 


►  John  is  the  visionary  behind  Enterasys'  holistic  security  solutions,  which  combine 
best-of-breed  products  and  technologies  with  comprehensive  service  offerings  for  a 
secure,  end-to-end  infrastructure  that  delivers  something  more— peace  of  mind. 


►  An  active  member  of  the  IEEE,  IETF  and  other  standards  bodies,  John  is  also  co-author  of 
the  recent  IEEE  802.1  x  Port-Based  Network  Access  Control  Standard. 


►  John's  vision  is  fully  realized  in  the  secure,  highly  available  and  mobile  networks  of  Ferrari 
S.P.A.,  Merrill  Lynch,  St.  John's  Hospital,  Wake  Forest  University  and  Motorola. 


We  can  do  the  same  for  you.  Call  877-423-8074  or  visit  the  web  at  enterasys.com. 


NETWORKS., 

The  name  behind  the 
most  trusted  networks. 


John  J.  Roese 

SVP,  Chief  Technology  Officer,  Enterasys  Networks 
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You've  set  up  a  rock-solid  VPN  that 
guarantees  private,  encrypted  com¬ 
munication.  But  if  your  VPN  relies  on 
passwords  for  security,  how  can  you 
be  sure  who's  on  the  line?  After  all, 
passwords  can  be  found,  guessed, 
stolen  and  hacked. 

RSA  SecurlD's  two-factor  authenti¬ 
cation  combines  a  one-time  code, 
refreshed  every  60  seconds,  with  a 
private  PIN  to  ensure  that  you  know 
who's  on  your  network  at  all  times. 

The  security  of  your  mission  critical 
applications  is  at  stake.  That's  why 
products  from  leading  VPN  vendors 
are  compatible  with  RSA  SecurlD. 
Contact  RSA  Security,  your  source  for 
authentication,  encryption  and  PKI. 

1-800-495-1095 
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www.rsasecurity.com/go/vpn 
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Exploring  1 0G  Ethernet  and  beyond 

Experts  say  security,  traffic-shaping  technologies  needed  to  make  10G  practical. 


■  BY  PHIL  HOCHMUTH 

SAN  DIEGO  —  While  10G  Ethernet 
deployments  are  expected  to  start  more 
widely  once  the  standard  is  ratified  next 
June,  this  higher-speed  Ethernet  may  not 
be  practical  in  some  enterprise  and  carri¬ 
er  networks  until  supplementary  technolo¬ 
gies  —  such  as  TCP/IP  off-load  and  higher- 
speed  firewalls  —  are  ready. 

Those  were  sentiments  expressed  by  ex- 


Takes 

■  IBM  last  week  launched  a  low-end 
server,  dubbed  the  p610,  designed  to 
handle  general-purpose  tasks  as  an 
application  server  or  small  database 
server.  The  Unix  machine  comes  with 
one  or  two  Power3-ll  copper-based 
processors  from  IBM  running  at 
either  375  MHz  or  450  MHz.  Users 
can  expand  memory  in  the  server 
from  512M  bytes  to  8G  bytes.  The 
Model  6E1  was  built  to  take  up  rela¬ 
tively  little  space  and  is  less  than  24 
inches  deep  and  8.5  inches  wide.  The 
6C1  is  designed  to  fit  in  a  rack.  The 
base  server  starts  at  $7,500. 
www.ibm.com 

■  Rambus  last  week  said  it  has 
developed  a  signaling  technology 
that  could  boost  the  speed  at  which 
data  can  travel  between  chips 
inside  a  PC.  Codenamed  Yellowstone, 
the  technology  has  been  under 
development  at  Rambus  for  two 
years,  company  President  Dave 
Mooring  says.  Rambus  wouldn't  say 
when  it  expected  the  technology  to 
find  its  way  to  market,  but  said  it 
could  be  used  to  boost  perfor¬ 
mance  in  desktop  PCs,  notebooks, 
servers  and  mobile  gadgets.  When  it 
does  appear,  Yellowstone  initially  will 
support  data  transfer  rates  of  3.2 
GHz,  although  Rambus  hopes  even¬ 
tually  to  push  the  technology  to  6.4 
GHz,  Mooring  says. 


perts  at  a  10G  Ethernet  workshop  held  re 
cently  at  the  San  Diego  Supercomputer 
Center,  part  of  the  University  of  California 
San  Diego,  for  engineers  from  the  vendor 
and  standards  communities.  Issues  on  the 
table  included  what  technologies  are 
needed  to  support  security  and  traffic 
shaping  on  10G  bit/sec  networks, as  well  as 
what  comes  after  10G  Ethernet  —  40G, 
100G  or  160G  bit/sec? 

With  the  worldwide  installed  base  of 
Gigabit  Ethernet  ports  expected  to  in¬ 
crease  more  than  fivefold  by  2004  accord¬ 
ing  to  market  researcher  IDC,  experts  say 
demand  for  even  higher-speed  aggrega¬ 
tion  technologies  like  10G  Ethernet  will 
become  inevitable.  10G  Ethernet  is  pro¬ 
jected  to  be  mainly  a  carrier  technology 
for  metropolitan-area  service  providers, 
but  enterprise  network  applications  could 
include  backbone  aggregation  of  Gigabit 
links  in  a  data  center  or  switch-to-switch 
connectivity  across  a  large  campus. 

When  these  applications  start  rolling  out 
next  year,  says  Fred  Worley,  a  Hewlett- 
Packard  engineer,  initial  deployments  will 
not  have  everything  necessary  to  make  a 
10G  network  run  as  efficiently  as  a  1G 
bit/sec  network. 

“It’s  not  that  [10G  Ethernet]  is  too  fast,” 
Worley  says.“lt’s  just  that  new  technologies 


Early  10G  entrants 

These  switch  vendors  have  already 
announced  10G  Ethernet  products, 
even  though  the  standard  won’t  be 
ratified  until  next  June. 


Vendors 

Products 

Avaya 

Module  for  the  Cajun 
P550/P880  switches 

Cisco 

Modules  for  the  Cisco  7600 
router  and  Catalyst  6500 
switch 

Enterasys 

Matrix  E-1  switch 

Foundry 

Modules  for  the  Biglron 
switch 

Riverstone 

The  RS  16000  switch 

will  need  to  evolve.” 

TCP/IP  off-load  —  implementing  part  of 
an  IP  stack  as  hardware  instead  of  soft¬ 
ware  in  a  device  for  faster  performance  — 
and  new  algorithms  for  10G  bit/sec  pack¬ 
et  inspection  are  in  development.  But 
these  technologies  won’t  be  far  along 
enough  when  10G  products  start  shipping 
en  masse  next  year,  Worley  says.  These 
kinds  of  technologies  will  be  important 
for  ensuring  that  high-speed  links  are 


secure  and  that  devices  attached  to  these 
networks  can  keep  up  with  such  a  high 
packet-forwarding  rate. 

An  example  Worley  gave  of  how  10G 
Ethernet  is  challenging  network  hardware 
design  was  a  10G  Ethernet  network  inter¬ 
face  card  (NIC)  that  HP  is  co-developing 
with  Nortel.  (A  prototype  of  the  product 
was  demonstrated  last  month  at  NetWorld 
+Interop  2001  in  Atlanta.)  While  the  switch 
vendors  may  have  figured  out  how  to 
shunt  packets  along  at  10G  bit/sec,  Worley 
says,  his  research  is  dealing  with  such  chal¬ 
lenges  as  how  NICs  on  servers  with  next- 
generation,  high-bandwidth  bus  technolo¬ 
gies  (such  as  Non-Uniform  Memory  Access 
and  InfiniBand)  can  take  in  and  process 
that  much  data  from  such  a  big  pipe. 

“With  the  speeds  we’re  talking  about,”  he 
says, “one  second  of  buffering  [on  an  NIC] 
requires  1.2G  bytes  of  RAM.  How  many 
people  want  to  have  a  full  server’s  worth 
of  memory  on  their  NICs?" 

What’s  after  106? 

Even  with  the  10G  Ethernet  standard  still 
not  put  to  bed  completely,  engineers  at  the 
workshop  discussed  what  could  be  next. 
While  speeds  beyond  10G  bit/sec  probably 
won’t  find  their  way  into  enterprise  net- 

See  10G,  page  22 


InfoLibria  touts  do-it-yourself  CDNs 

New  appliances  offer  alternative  to  outsourcing  CDN  needs. 


■  BY  APRIL  JACOBS 

WALTHAM,  MASS.  —  New 
hardware  and  upgraded  soft¬ 
ware  from  InfoLibria  is  de¬ 
signed  to  let  companies  set 
up  their  own  content-deliv¬ 
ery  networks  rather  than  out¬ 
source  the  duties  to  a  service 
provider. 

InfoLibria,  which  up  until 
now  has  sold  CDN  products 
almost  exclusively  to  service 
providers,  says  companies 
willing  to  build  and  manage 
their  own  CDNs  will  gain 
more  control  over  the  con¬ 
tent  they  distribute  and 


should  be  able  to  save 
money  vs.  going  with  a  ser¬ 
vice  provider. 

CDNs  are  aimed  at  making 
network  content,  from  text 
files  to  streaming  video,  more 
readily  accessible  to  end 
users  while  saving  band¬ 
width  costs  for  the  content 
generator.  In  general,  the  idea 
is  to  put  more  of  the  content 
closer  to  the  end  users,  espe¬ 
cially  when  it  comes  to  band¬ 
width-intensive  content  such 
as  video. 

InfoLibria’s  new  offerings 
include  its  MediaMall  E-Class 
appliances,  which  typically 


sit  behind  firewalls  and  in 
front  of  Web  servers. 
Upgraded  versions  of  soft¬ 
ware  for  the  appliances  gives 
companies  a  Web-based  view 
of  all  devices  on  a  CDN  and 
provides  for  remote  setup 
and  management.  The  soft¬ 
ware  can  be  used  to  track 
network  usage  and  bill  for  it 
within  a  company,  and  to  set 
end-user  access  policies. 

The  offerings  compete  with 
products  from  companies 
such  as  CacheFlow,  Cisco, 
Network  Appliance  and 
Volera,  and  setting  up  corpo¬ 
rate  CDNs  provides 


an  alternative  to  services 
from  companies  such  as 
Akamai  Technologies,  Digital 
Island  and  Speedera 
Networks,  observers  say. 

Building  a  CDN  can  be  a 
better  fit  than  using  a  CDN 
service  for  companies  that 
don’t  need  to  constantly 
have  their  content  distrib¬ 
uted,  says  Greg  Howard,  an 
analyst  with  HTRC  Group.  A 
homegrown  CDN  can  make  it 
easier  to  control  how  certain 
content  is  pushed  out  to  end 
users.  “Transferring  one  copy 
of  a  file  vs.  150  copies  or 
See  InfoLibria.  page  22 
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Ease  of  use:  No  small  part  of  TCO 


With  many  network  products  — 
from  network  interface  cards  to 
switches  and  beyond  —  becoming 
commodities,  the  ease  with  which  they 
can  be  set  up  and  maintained  looms  ever 
larger  as  an  important  factor  in  the  “total 
cost-of-ownership”  equation. 

Manufacturers  know  this  and  many 
address  the  issue  —  or  think  they  do.  Each 
year,  hundreds  of  products  roll  through 
the  labs  at  The  Tolly  Group  —  and  far  too 
many  are  just  plain  hard  to  use. 

“Ease  of  use”  cannot  be  evaluated  in  as 
easy  and  straightforward  a  manner  as, 
say,  packet  forwarding.  Many  vendors 


apparently  take  the  quasi-subjective  na¬ 
ture  of  the  issue  to  mean  they  simply  can 
put  forth  unsubstantiated  claims  about 
the  ease  with  which  their  products  can 
be  used. 

A  few  years  back,  when  graphical  user 
interfaces  began  to  supplant  MS-DOS/Tel- 
net  command-line  interfaces,  the  vendor 
community  convinced  customers  that  by 
definition  GUIs  made  their  products  easy 
to  use.  It  wasn’t  the  case  then,  and  it  isn’t 
the  case  now. 

More  than  once,  our  engineers  have  re¬ 
treated  to  using  Telnet  to  configure  a  de¬ 
vice  because  the  browser  interface  made 
no  sense  at  all. 

More  commonly,  we’ve  needed  to 
abandon  the  browser  because,  via  that 
interface,  one  cannot  configure  func¬ 
tions  like  switch  quality  of  service.  (Ask 
your  vendor:  “Can  1  configure  100%  of 
your  product’s  function  via  the  browser 
interface?”) 


So,  what  are  the  causes  of  this  “dis-ease- 
of-use”? 

Simple:  Vendors  don’t  concentrate  on 
improving  ease  of  use  because  they  have 
convinced  themselves  that  their  products 
are  already  really  easy  to  use. 

I  know  this  because,  as  part  of  testing 
projects,  vendors  proud  of  their  product’s 
“ease”  often  ask  us  to  include  an  informal 
evaluation  so  that  we  can  sing  the  praises 
of  the  product  in  our  report.  Our  honest 
feedback  takes  them  by  surprise. 

All  too  often,  vendors  are  simply  in  a 
hurry  to  get  their  products  out  the  door. 
Some  apparently  don’t  even  spend  five 
minutes  making  sure  that  the  documen¬ 
tation  and  the  installation  CD  are  in 
sync. 

In  one  recent  evaluation,  the  installa¬ 
tion  hit  a  dead-end  on  the  first  page 
when  the  vendor  instructed  the  user  to 
click  on  a  menu  option  that  simply  did 
not  exist. Trying  all  of  the  options  on  the 


menu  eventually  allowed  us  to  “recon¬ 
nect”  with  the  documentation  but  this 
kind  of  glaring  error,  easily  fixed,  simply 
should  not  happen.  Where  was  the  qual¬ 
ity  assurance  on  this? 

More  often,  though,  we  have  the  tech¬ 
nological  equivalent  of  the  old  adage 
“beauty  is  in  the  eye  of  the  beholder.”The 
developers  of  these  products  truly  believe 
that  these  products  are  easy  to  use 
because  for  them  they  are  easy  to  use.  A 
product’s  developers  —  and  their  fre¬ 
quent-user  colleagues  —  are  the  worst 
people  to  evaluate  ease-of-use  objectively 

Staffing  pressures  will  not  go  away.  Ease- 
of-use  will  continue  to  be  a  significant 
total  cost-of-ownership  factor.  It  is  time 
that  vendors  realistically  assess  their 
approach  to  human  factors  issues. 

Tolly  is  chairman  and  CEO  of  The  Tolly 
Group.  He  may  be  reached  at  ktolly 
@tolly.com. 


LindowsOS:  A  little  bit  Linux,  a  little  bit  Windows 


■  BY  SAM  COSTELLO 

A  new  company  founded  by 
MP3.com  founder  and  former 
CEO  Michael  Robertson  is  look¬ 
ing  to  bridge  the  gap  between 
applications  available  for  Linux 
and  Windows  —  a  gap  many 
open  source  software  advocates 
blame  for  slow  uptake  of  Linux 
on  desktop  computers. 

The  company  called  Lindows. 
com,  plans  to  release  by  year-end 
a  preview  release  of  a  Linux- 
based  operating  system,  dubbed 
LindowsOS,  that  can  run  both 
Linux  and  Windows  applica¬ 
tions. 

Linux  users  have  had  to  rely  on 
WINE,  a  program  that  lets  Win¬ 
dows  applications  run,  although 


not  efficiently  on  Linux  systems. 

Skeptical  feedback  on 
Lindows.com’s  announcement 
came  from  Dan  Kusnetzky,  an 
analyst  at  market  research  firm 
IDC.  “I  believe  that  technically  it 
can  be  made  to  work.  I  also 
believe  that  it  will  be  difficult  to 
convince  people  [to  use  it],”  he 
says. 

There  are  several  companies 
—  such  as  Citrix  Systems  —  that 
offer  Linux  users  the  ability  to 
employ  Windows  applications, 
but  such  vendors  let  customers 
run  those  programs  on  Windows 
computers  and  provide  a  way  for 
Linux  users  to  open  them  in  a 
separate  space  on  the  desktop, 
simplifying  the  whole  process, 
Kusnetzky  says. 


Lindows.com  will  also  have  to 
figure  out  a  way  to  document  all 
the  Windows  interfaces,  informa¬ 
tion  that  Microsoft  has  not  com¬ 
pletely  released.  Without  these 
interfaces,  software  cannot  be 
guaranteed  to  function  properly 
Kusnetzky  says.  Though  work  in 
this  area  is  being  done  with 
WINE,  it  is  far  from  complete,  he 
adds. 

The  final  version  of  the  Lind¬ 
owsOS  will  cost  about  $100 
and,  as  with  all  Linux  operating 
systems,  a  single  copy  can  be 
installed  legally  on  multiple 
computers. 

Costello  is  a  correspondent  with 
the  IDG  News  Services’  Boston 
bureau. 
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works  anytime  soon,  they  are  headed  for  carrier  net¬ 
works  and  could  have  a  big  impact  on  the  kinds  of 
services  delivered. 

“Fifty  percent  of  the  802.3ae  [10G  Ethernet]  task 
force  thinks  the  speed  should 
be  40  Gigabit,”  says  Johnathan 
Thatcher,  chair  of  the  IEEE 
8Q2.3ae  ( 10G  Ethernet)  Working 
Group  and  CTO  of  Worldwide 
Packets.  “But  we’ve  always  gone 
up  by  factors  of  10.” 

IEEE  engineers  don’t  like  to  re¬ 
invent  the  wheel,  Thatcher  says. 

Just  as  the  physical  layer  (PHY) 
design  of  Gigabit  Ethernet  was 
based  largely'  on  Fibre  Channel, 
and  some  10G  PHYs  were  tied  to 
OC-192.40G  Ethernet  could  be  a 
likely  next  step,  as  40G  bit/sec  is 


close  to  the  OC-768  SONET  technology  that  already 
exists. 

Others  think  differently. 

“A  while  back, some  people  [in  the  IEEE]  want¬ 
ed  to  do  a  400M  bit/sec  standard,” says  Bob  Grow, 
president  of  the  10  Gigabit  Ethernet  Alliance  and 
an  Intel  engineer.  “Look  what  happened  to  that 
effort.” 

While  many  IEEE  members 
would  like  to  see  40G,  Grow  is 
more  inclined  to  either  100G 
bit/sec  or  160G  bit/sec  Ethernet. 

“Forty  Gigabits  per  second  does 
not  have  the  bandwidth  increase 
that  holds  interest  for  me,”  Grow 
says. 

But  for  the  sake  of  staying  close 
to  SONET  technology,  Grow  says 
he  could  live  with  160G  bit/sec 
Ethernet,  which  would  adhere  to 
OC-3072  —  neither  of  which  will 
probably  exist  for  several  years  ■ 
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Get  inks  to  Web  sites  and  articles  on  the 
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more  is  dramatically  less 
expensive,”  he  says. 

One  reason  homegrown 
CDNs  could  catch  on  is  that 
streaming  is  gaining  mo¬ 
mentum  for  use  in  online 
training  and  other  applica¬ 
tions.  HTRC  research  indi¬ 
cates  that  the  35%  of  compa¬ 
nies  do  streaming  and  that 
42%  of  them  will  in  2002.  Of 
those  companies  doing 
streaming,  more  than  half  will 
choose  to  build  their  own 
CDNs  rather  than  outsource, 
according  to  HTRC.  And  that 
streaming  will  take  up  more 
network  bandwidth:  Com¬ 
panies  expect  that  12%  of 
their  network  capacity  will  be 
taken  up  by  streaming  appli¬ 
cations  this  year  and  increase 
to  19%  in  2002. 

InfoLibria’s  new  appliances 
include  the  E100,  which  fea¬ 
tures  36G  bytes  of  disk  stor¬ 
age,  512M  bytes  of  RAM,  dual 
10/100M-bit/sec  Ethernet 
ports  and  a  1,000-MHz 

Of  those  compa¬ 
nies  doing  stream¬ 
ing,  more  than 
half  will  choose  to 
build  their  own 
CDNs  rather  than 
outsource. 


InfoLibria's  MediaMall  El  00  con¬ 
tent-delivery  network  appliances 
include  a  slew  of  management 
capabilities,  including  remote 
setup. 

Pentium  III  processor. 

The  E100  can  accommodate 
90M  bit/sec  on-demand 
streaming  or  170M  bit/sec  live 
streaming.  'The  box  costs 
$11,000. 

The  more  powerful  E200 
comes  with  a  54G-  or  108G- 
byte  disk-storage  capacity,  1G 
byte  of  RAM,  dual  10/100M- 
bit/sec  Ethernet  ports  and  a 
Gigabit  Ethernet  uplink. 

This  device,  which  sports 
two  1,000MHz  Pentium  II 
processors,  features  160M-  to 
200M-bit/sec  on-demand 
streaming  or  250M-  to  300M- 
bit/sec  live  streaming.  It  costs 
$17,000. 

Appliances  packaged  with 
Content  Commander  5.0,  the 
upgraded  management  soft¬ 
ware,  start  at  $25,000. 

The  E-Class  appliances  are 
not  InfoLibria’s  first  enterprise 
network  offerings. The  compa¬ 
ny  already  offers  caching 
appliances  for  enterprises  and 
service  providers  under  the 
DynaCache  brand. 

InfoLibria:  www.infolibria. 
com 


‘mark  of  Intel  Corporation  or  its  subsidiaries  in  the  United  States  and  other  countries.  All 


Gigabit  capability  on  your  current  Cat-5  network  isn’t  a  pipe  dream.  With  Intel*  PRO/IOOO  T  Server  Adapters  you  can  increase  your  bandwidth  capacity 
by  a  massive  ten  times.  These  gigabit  adapters  work  with  your  existing  10/1 00Mbps  network  and  will  seamlessly  ramp  up  to  1000Mbps.  And  they’re  not 
just  super-fast.  They’re  super-flexible.  Intel  PRO/1000  T  Server  Adapters  offer  advanced  server  features  like  load  balancing  and  fault  tolerance  across 
multiple  operating  systems.  Inter  PRO  Network  Connections,  the  intelligent  way  to  connect.  For  more  information  and  a  trial  kit,  visit  intel.com/network/go/cat5/ 


iny 


MM  3UAHCIMSI 
15  Dut'JSry) 


GLOBAL  SERB 
(Smart  Contel 


IP- VPN  '  . 

(IP  SecrType;  Global  IP 
Security  Gateway  Ser 
(Multi-protocol  labelj 
switchin  a  (MpT’sT.Tvoi 


DATA  CENTER 


ce) 


The  Internet  is  a  volatile  place.  For  peace 
of-mind,  you  need  a  provider  that  can 
deliver  solutions  now  and  in  the  future. 

NTT  Communications  has  been  supplying 
global  managed  data  network  services, 
through  technologies  that  include  Frame 
Relay  and  ATM,  under  the  name  of  Arcstar. 

In  2000,  we  acquired  Verio,  a  leading  Inter¬ 
net  solutions  provider.  Now  our  combined 
forces  offer  worldwide  IP  services  via  a 
global  Tier  1  network  and  state-of-the-art 
managed  Data  Centers.  As  NTTA/ERIO,  we 
promise  stability  and  reliability  backed  by 
strong  financial  and  knowledge  resources. 

If  the  Internet  is  vital  to  your  business, 
it's  time  you  contemplated  the  wonders  o-! 
secure  and  seamless  connections  at 
www.ntt.com/verio. 
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Can  IP  ever  stand  for  Inner  Peace? 


www.ntt.com/verio 


For  further  information,  contact  : 
NTT  Communications  Corporation, 
nttverio@ntt.com 


NTT  Communications  Group  Offices  Japan  •  USA  •  Brazil  •  UK  •  France  •  Germany  •  Netherlands  •  Belgium  •  Switzerland 
•  Italy  •  Spain  •  Korea  •  China  •  Hong  Kong  •  Taiwan  •  Vietnam  •  Thailand  •  Indonesia  •  Singapore  •  Malaysia  •  Philippines  •  Sn  Lanka  •  Australia 
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■  INTRANETS  ■  MESSAGING/GROUPWARE 

■  E-COMMERCE  ■  SECURITY  ■  VPNs 

■  NETWORK  MANAGEMENT  ■  DIRECTORIES 


Probe  gives  user  better  handle  on  WAN 

Monitoring  WAN  bandwidth  usage  saves  stock  trading  firm  a  bundle. 


■  BY  DENISE  DUBIE 

When  Chris  Lukas  agreed 
to  view  a  demonstration  of 
NetScout’s  nGenius  Real- 
Time  Monitor,  he  didn’t  in¬ 
tend  to  spend  money  on 
new  products.  After  all,  his 
job  is  to  keep  IT  costs  down 
while  giving  500  or  so  users 
the  most  bandwidth  and 
uptime  possible.  But  he  took 
a  chance  —  and  to  his  delight,  the  tool 
now  saves  his  company  more  than  $  1  mil¬ 
lion  per  year. 


Takes 


■  Courion  next  month  plans  to  un¬ 
veil  two  server-based  authentication- 
management  products,  Account- 
Courier,  for  self-service  account 
provisioning,  and  CertificateCour- 
ier,  for  self-service  issuance  of  digi¬ 
tal  certificates.  AccountCourier,  for 
centralized  management  of  Windows 
NT,  RAC/F  and  e-commerce  applica¬ 
tions,  will  cost  $20  per  user,  while 
CertificateCourier,  to  support  En¬ 
trust  certificates,  will  cost  $10  per 
user,  www.courion.com 

■  NetVision  last  week  made  available 
for  free  a  set  of  scripts  for  its  recently 

released  Policy  Management 

Suite,  a  real-time  policy  enforcement 

engine  for  Novell’s  eDirectory.  The 

suite  lets  users  set  management  poli¬ 
cies  while  the  scripts  are  used  to 
automatically  enforce  those  policies. 
The  Visual  Basic  scripts  are  triggered 
when  a  change  or  update  is  made  to  a 
directory,  file  server  or  operating  sys¬ 
tem.  The  latest  scripts  focus  on  cor¬ 
recting  unauthorized  changes  to  ac¬ 
cess  control  lists  and  passwords, 
establishing  consistency  in  moving 
users,  and  automating  the  deletion  of 
unwanted  files,  such  as  MP3  or  AVI 
files.  The  scripts  are  available  at  www. 
netvision.com. 


Stock  trading  firm  Hold 
Brothers  pays  more  than 
$80,000  per  month  to  main¬ 
tain  an  average  of  four  T-l 
lines  to  each  of  its  15  remote 
offices.  Initially,  it  seemed  the 
company  would  have  to  add 
more  T-l  lines  to  help  em¬ 
ployees  sustain  their  rate  of 
about  1,000  trades  per  day. 
According  to  his  calcula¬ 
tions,  Lukas  would  have  had 
to  pay  another  $6,000  per  month,  per  T-l 
line. 

“We  had  not  even  considered  buying 
software  to  monitor  WAN  usage,  but  Net- 
Scouts  demo  showed  us  instantly  how 
our  internally  written  software  that 
worked  well  on  the  LAN  was  using  too 
much  bandwidth  over  the  WAN,”  says 
Lukas,  Hold  Brothers’  CTO.  “We  were  able 
to  rewrite  the  application  to  minimize 
WAN  utilization.” 

He  says  the  application  all  the 
traders  use  just  didn’t  translate  well  in 
the  wide-area  environment.  Using  the 
data  NetScout  collected,  Lukas’  staff  re¬ 
configured  the  WAN  connections  and  re¬ 
routed  traffic  to  optimize  WAN  band¬ 
width  for  each  user.  Network  World  re¬ 
viewers  also  recently  looked  at  what  Net¬ 
Scout’s  nGenius  product  suite  had  to 
offer  users  (see  www.nwfusion.com,  Doc- 
Finder:  6624). 

During  the  demo,  Lukas  found  one  user 
tying  up  lots  of  WAN  bandwidth  during 


■  BY  JENNIFER  MEARS 

BURLINGTON,  MASS.  —  For  Nikon  USA, 
flat  HTML  files  were  no  longer  enough  for 
its  product  information  Web  site.The  com¬ 
pany  wanted  to  use  rich  media  —  a  com¬ 
bination  of  Flash  animation,  graphics  and 
text  —  to  make  the  site  more  compelling 
and  easier  to  use. 

The  problem  was  that  the  life  cycle  for 
Nikon’s  products  is  between  four  and  six 
months,  and  that  meant  the  rich  media 
would  have -to  be  updated  frequently.  Cost 


trading  hours  because  he  had  chosen  an 
“upgrade  Windows”  option.  Lukas  says  he 
was  able  to  track  down  the  user  and  the 
site  to  which  he  was  connecting,  and 
postpone  the  bandwidth-hogging  activity 
until  after  hours. 

“The  demo  showed  us  the  user  and 
what  he  was  doing,  and  we  were  able  to 
tell  him  instantly  to  stop,”  Lukas  says. 

Last  December,  Hold  Brothers  installed 
NetScout’s  WAN  RTM  multiport  probes  at 
five  remote  offices,  and  the  LAN  RTM  at  its 

WAN-tastic  savings 


became  an  issue. 

“We  need  to  make  a  lot  of  changes  on 
the  site  very  quickly,” says  Jerry  Grossman, 
vice  president  of  Internet  development 
for  Nikon.  “We  also  have  a  lot  of  acces¬ 
sories  for  our  products,  and  we  needed  to 
find  a  way  to  put  all  of  these  accessories 
on  the  site,  but  to  do  it  in  a  way  that  was 
cost-efficient.” 

Grossman  found  the  way  with  a  start¬ 
up  called  Concentric  Visions.  The  soft¬ 
ware  vendor  is  peddling  a  content  man¬ 
agement  system  called  Dynamic  Media 


headquarters  in  Jersey  City,  N.J.  Each 
probe  can  monitor  four  T-l  lines  and  send 
data  back  to  a  management  console  at 
headquarters.The  data  collected  by  all  the 
remote  office  probes  is  stored  in  a  Sybase 
database,  which  delivers  WAN  usage  infor¬ 
mation  to  authorized  users  via  a  standard 
Web  browser. 

In  the  past,  Lukas’ staff  of  seven  IT  work¬ 
ers  monitored  WAN  traffic  by  checking 
Cisco  router  ports,  but  he  says  that 

See  Hold  Brothers,  page  26 


Manager  that’s  focused  solely  on  rich 
media,  combinations  of  various  content 
such  as  Flash  animation,  graphics,  audio, 
video  and  text.  The  idea,  company  exec¬ 
utives  say,  is  to  let  companies  manage 
rich  media  files  just  as  they  would 
text  files. 

Today,  rich  media  is  typically  handled  as 
packages,  and  making  changes  requires 
developers  to  go  in  and  play  with  the 
code.  For  Nikon,  that  meant  going  to  its 
design  firm,  RedSky  for  every  modifica- 
See  Concentric,  page  26 
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Stock  trading  firm  Hold  Brothers  saved  more  than  $1  million  on  WAN  costs 
in  one  year  after  reworking  bandwidth-hogging  applications  that  were 
flagged  using  NetScout’s  probes  and  management  console  software. 

One  of  Hold  Brothers'  15  remote  offices 
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NetScout’s  WAN  probe 
passively  collects  and 
filters  usage  data  from 
T-1  lines. 


NetScout 

management 

console 


The  probe  pulls  data  from  the 
“top  10  conversations”  on  each 
line,  analyzes  it  and  sends  a 
summary  back  overtheT-1  to 
the  management  console. 
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IT  staff  uses  the  data 
collected  by  the  probe 
to  spot  bandwidth¬ 
hogging  applications. 


Start-up  aims  to  keep  users  of 
rich  media  out  of  the  poorhouse 
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Verizon  did  an  amazing  job  of  partial 
restoration  after  the  company’s 
switching  center  at  140  West  St.  in 
New  York  was  damaged  and  the  switching 
equipment  went  down  when  the  World 
Trade  Center  towers  collapsed.  But  will 
Verizon  or  any  other  telecommunications 
company  be  ready  to  undertake  the  same 
sort  of  restoration  effort  in  the  future? 

The  Verizon  center  at  140  West  St.  is  the 
telecommunications  hub  of  lower  Man¬ 
hattan.  From  it, Verizon  serves  (or  served) 
4.5  million  data  circuits  and  300,000 
phone  lines.  In  addition,  a  number  of 
other  telecommunications  companies 
interconnected  with  Verizon’s  lines  at 
the  facility. 

Within  a  week  of  the  collapse,  Verizon 
was  able  to  pull  together  the  resources, 
people, equipment  and  supplies  to  restore 
service  to  the  New  York  Stock  Exchange 


Will  we  be  able  to  restore  in  the  future? 


and  some  other  customers.  It  is  still  work¬ 
ing  on  restoring  service  to  many  other 
locations. 

That  Verizon  was  able  to  restore  service  is 
a  legacy  of  decades  of  regulated  monop¬ 
oly  operation.lt  had  enough  people  to  call 
upon  to  do  the  work  and  enough  equip¬ 
ment  and  supplies 
(such  as  fiber-optic 
cable)  stockpiled  to 
make  the  work  possible 
because  the  regulators 
supported  the  costs  of 
the  people  and  stock¬ 
piles  in  the  rate  struc¬ 
tures  Verizon  has  been 
permitted  to  charge.  It  is 
scary  to  contemplate 
what  Verizon’s  readiness 
would  be  in  a  purely 
competitive  environment.  It  costs  a  lot  of 
money  to  be  ready  for  disasters,  money 
that  makes  it  harder  to  compete  for  other 
companies  that  might  not  invest  the  same 
in  preparedness. 

There  also  is  a  network  architecture  fac¬ 
tor  here.  The  telephone  network  tends  to 
be  designed  with  relatively  few  big  switch¬ 
ing  centers,  because  they  are  more  effi¬ 


cient.  If  one  of  these  centers  is  put  out  of 
commission,  as  140  West  St.  was,  large 
numbers  of  customers  are  affected.  A 
more  distributed  network  design  with 
many  more  smaller  switching  centers 
would  not  be  as  efficient,  but  fewer  cus¬ 
tomers  would  be  affected  by  the  failure  of 


a  switching  center. 

The  original  design  of  the  Internet  took 
this  into  account.  One  of  the  early  design 
goals  was  survivability  in  the  face  of 
damage  (see,  for  example,  Paul  Baron’s 
work  from  1964  at  www.rand.org/publi- 
cations/RM/RM3420/).  There  has  been 
some  move  toward  centralization  within 
ISPs,  but  the  redundant  design  of  ISP  net¬ 


works  tends  to  mitigate  the  effect  of  any 
specific  outage. 

The  basic  question  for  the  future,  both 
for  traditional  telecommunications  com¬ 
panies  and  ISPs,  is  one  of  incentives. 
What  types  of  incentives  are  needed  to 
ensure  the  network  designs  are  outage- 
resistant?  And  that  the  providers 
maintain  adequate  stockpiles  of 
equipment  and  supplies,  and  that 
there  are  enough  human  re¬ 
sources  to  respond  to  a  natural 
outage  such  as  a  hurricane  or  a 
man-made  outage?  And  who  is 
going  to  provide  the  incentives  in 
this  era  of  deregulation? 

Telecommunications  networks, 
including  the  Internet,  are  a  foun¬ 
dation  for  much  of  our  economy 
and  society.  Doing  things  in  the 
most  efficient  way  may  not  be  the  best 
path  for  us. 

Disclaimer:  Harvard  understands  that 
efficiency  may  not  always  be  the  best 
path,  but  the  above  is  my  path. 

Bradner  is  a  consultant  with  Harvard 
University’s  University  Information  Systems. 
He  can  be  reached  at  sob@sobco.com. 


A  more  distributed  network  design  with 
many  more  smaller  switching  centers 
would  not  be  as  efficient,  but  fewer 
customers  would  be  affected  by  the 
failure  of  a  switching  center. 


Location: 

PROFILE: 

CONCENTRIC  VISIONS 

Burlington,  Mass. 

Founded: 

January  2000 

Business: 

Content  management  software  for  rich  media  such 
as  Flash,  audio  and  video. 

Founder: 

Sundar  Subramaniam,  though  no  longer  involved 
operationally.  He  also  founded  1-Cube,  now  owned 
by  Razorfish,  and  CambridgeTechnology  Partners, 
now  owned  by  Novell. 

Financing: 

$10  million  in  venture  backing  from  Sigma  Partners, 
GrandBanks  Capital  (in  partnership  with  Softbank), 
1-Group/HotBank  and  Internet  Business  Capital. 

Customers: 

Include  Nikon  and  the  Department  of  Defense. 

Fun  fact: 

Concentric  Visions  was  hatched  in  a  mansion,  spent 
time  in  a  turn-of-the-century  Boston  theater  and  is 
maturing  in  a  1980s  high-tech  office  park. 

Hold  Brothers 

continued  from  page  25 

method  never  told  them  imme¬ 
diately  which  users  were  taking 
up  more  than  their  share  of 
bandwidth  and  to  what  site  they 
were  connected. 

Now  that  they  have  NetScout 
probes  plugged  in,  Lukas  and 
his  staff  can  monitor  the  “top  10 
conversations,”  or  users  of  the 
line,  and  take  action  when  they 
see  something  that  doesn’t 
belong. 

“The  employees  aren’t  doing 
anything  wrong  —  this  isn’t 
about  MP3  abuse.  It  was  our 
responsibility  to  reengineer  the 
applications  so  that  when  em¬ 
ployees  simply  do  their  jobs, 
the  bandwidth  is  used  appro¬ 
priately,”  Lukas  says. 

One  thing  Lukas  would  like  to 
see  improved  with  NetScout’s 
products  is  “real-time  expert  an¬ 
alysis  of  packets  at  low  speeds.” 
He  says  no  vendors  seem  to  be 
able  to  perform  this  type  of  analy¬ 
sis  at  high  speeds,  though  Net¬ 
work  Associates’  Sniffer  can  do  it 
at  low  speeds. 

Not  only  does  Lukas  track  re¬ 
sponse  time  on  internal  appli¬ 
cations,  but  he  can  also  track 
how  well  an  electronic  commu¬ 
nication  network  (ECN),  an  al¬ 
ternative  exchange  for  Nasdaq 
stocks,  responds  to  traders’  re¬ 
quests  Hold  Brothers'  direct  ac¬ 
cess  traders  can  see  all  the 
ECNs  simultaneously  and 


choose  to  send  an  order  to  any 
of  them. 

“Now  we  can  announce  to 
our  traders  if  there  is  slow 
response  time  with  an  ECN, 
because  no  one  wants  to  send 
their  orders  to  a  slow  ECN.  The 
whole  idea  is  being  the  fastest,” 
Lukas  says. 

He  says  that  because  RTM  “is 
extremely  easy  to  use  and  com¬ 
pletely  unobtrusive  to  our  net¬ 
work,”  remote  staffers  can  moni¬ 
tor  their  own  WAN  usage  and 
chase  down  bandwidth  hogs  at 
their  locations,  saving  time  for 
his  staff.  In  the  future,  Lukas 
plans  to  further  simplify  WAN 
and  LAN  traffic  monitoring  by 
tying  his  NetScout  monitors  into 
the  company’s  network  manage¬ 
ment  software,  Hewlett-Packard’s 
OpenView. 

Lukas  says  the  $300,000  invest¬ 
ment  in  NetScout  products  is 
already  paying  off  by  saving  him 
more  than  $1  million  per  year  in 
T-l  costs.  Depending  on  network 
configuration,  the  nGenius  RTM 
software  and  products  can  cost 
as  low  as  $15,000. 

“It’s  one  of  the  very  few  prod¬ 
ucts,  by  far  the  easiest  to  use,  that 
lets  us  see  —  workstation  by 
workstation,  line  by  line,  address 
by  address,  and  conversation  by 
conversation  —  exactly  what  traf¬ 
fic  is  flowing  over  our  LAN  and 
our  WAN,”  Lukas  says.  “It  simply 
gives  us  visibility  we’ve  never  had 
before.” 

NetScout:  www.netscout.com 


Concentric 

continued  from  page  25 

tion,  and  that  was  costly. 

Cost  is  one  of  the  reasons  why 
only  about  20%  of  businesses  use 
rich  media  on  their  Web  sites, 
analysts  say  But  that  number  is 
sure  to  grow.  Meta  Group  predicts 
that  by  2004, more  than  80%  of  all 
Web  sites  will  have  rich  media 
content. 

“As  the  pipe  widens  and  as  orga¬ 
nizations  become  a  little  more 
familiar  with  how  to  use  content 
to  good  effect,  they’re  slowly  mov¬ 
ing  into  using  more  types  of  rich 
media,”  says  Evan  Quinn,  chief 
analyst  at  Hurwitz  Group. 

“The  problem  has  been  how 
do  you  commingle  all  this 
fancy  stuff  with  your  base  Web 
content  management  system. 
That’s  the  problem  that  Con¬ 
centric  Visions  is  really  trying  to 
solve,”  he  says. 

Dynamic  Media  Manager  is 
based  on  patent-pending  tech- 


More  online! 

Read  more  about  the  emergence 
of  rich  media. 

DocFinder  6661 


nology  that  breaks  down  com¬ 
plex  rich  media  packages  into 
objects  at  the  presentation  layer. 
That  way,  says  CEO  Garth  Rose, 
pieces  of  rich  media  can  be 
reused  and  updated  without  hav¬ 
ing  to  hard  code  changes.  For 
example,  the  components  of  a 
Flash  clip  would  be  indexed  in 
the  Dynamic  Media  Manager, 
rather  than  the  entire  clip  as  a 
whole,  making  it  easier  to  change 
different  portions. 

The  Concentric  software  is 
loaded  onto  a  Windows  NT  serv¬ 
er.  The  company  using  it  registers 
its  rich  media  elements  into  the 
Dynamic  Media  Manager  index¬ 
ing  and  rules  engine.  Business 


rules  are  applied  to  the  pieces  to 
dictate  how  elements  of  the  rich 
media  should  interact. The  rich 
media  files  are  stored  in  a  SQL 
Server  or  Oracle  9i  database, 
and  the  software  hooks  into  a 
BEA  Systems  application  server, 
Rose  says. 

Business  users  make  changes 
to  the  rich  media  using  a  browser 
interface  that  is  updated  and 
configured  as  new  rich  media 
elements  are  added  and  as  user 
access  rights  change. 

The  Dynamic  Media  Manager 
costs  $50,000  for  an  enterprise 
license. 

Concentric:  www.concentric 
visions.com 


I'm  not  just  another  pretty  face.  I'm  a  better  way  of  doing  things. 


I  am  Dell.  Simplifying  the  way  the  world  buys  and  manages  technology,  one  customer  at  a  time. 

By  all  appearances,  I  am  a  server.  But  take  a  closer  look,  and  you'll  see  I  am  more  than  that. 

I  am  a  direct  relationship,  free  of  middlemen. 

I  am  the  best  value  in  the  industry. 

I  am  custom-built  technology  that's  pre-loaded  and  pre-tested,  just  for  you. 

I  am  a  single  point  of  contact  for  service  and  support:  on-site,  online  and  on  the  phone. 

I  am  an  industry-standard  Intel®  processor-based  solution  that's  easy  to  manage, 
and  easy  to  keep  up  and  running. 

I'm  just  the  part  of  the  company  you  see  every  day.  The  part  you'll  be  looking  at  when  you  realize  that 
what  you  really  bought  was  a  better  way  of  doing  things.  Find  out  what  customers  and  analysts  are 
saying  about  Dell.  Visit  us  online  today  at  dell.com/enterprise3. 
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K  MANAGEMENT  Combining  software  tools  and  network  savvy  can  help  to  better  plan  networks. 


Demystifying  capacity  planning 


■  BY  DENISE  DUBIE 

By  his  own  admission, John  Payton 

used  to  plan  network  capacity  for  R.R. 

Donnelley  by  the  seat  of  his  pants. 

“I  knew  how  I  did  things  in  the  past,  and 
I  figured  if  it  worked  once,  it’s  worth  try¬ 
ing  it  again,”  Payton  says.“lf  we  came  up 
short,  I’d  just  throw  more  bandwidth  on 
the  network.  It  really  wasn’t  a  scientific  method.” 

But  when  the  Chicago  publisher  changed  its  busi¬ 
ness  model  and  expanded  its  services  to  include  con¬ 
tent  management  and  digital  photography,  Payton  real¬ 
ized  even  his  best  “educated  guess”  might  not  be 
enough  to  ensure  the  network  could  handle  new 
bandwidth-hogging  applications. 

Payton  is  not  alone.  Historically  network  architects 
would  simply  add  more  bandwidth  to  networks  to 
improve  performance  when  their  businesses  added  more 
users  and  services.  But 
Payton  points  out  the  art  of 
capacity  planning  “isn’t  as 
simple  as ‘more  is  better’” 

There  are  many  capacity 
planning  tools  on  the  mar¬ 
ket  that  collect  network, 
system  and  application 
performance  data  —  in 
real  time  or  over  long  peri¬ 
ods,  or  both  (see  graphic, 
right). Some  software  lets 
companies  create  model 
networks  and  simulate  traf¬ 
fic  to  predict  their  band¬ 
width  needs  for  future 
users  and  applications.The 
modeling  tools  let  compa¬ 
nies  pose  “what  if?”  scenar¬ 
ios  to  calculate  how  the 
network  would  behave  in 
certain  situations. 

About  two  years  ago, 

Payton  and  his  team  at 
R.R.  Donnelley  started  using  Opnet’s  software  called  IT 
Guru.  He  tested  how  new  applications  would  behave  on 
his  network  and  determined  exactly  how  much  band¬ 
width  he’d  need.  In  the  past,  he  would  have  made  an 
estimate  and  doubled  that  number,  but  the  software 
helps  him  determine  more  accurately  what  to  provision. 

Payton  uses  the  software  to  analyze  the  response 
times  of  applications  in  the  simulated  network  and 
determine  how  he  could  improve  them,  whether 
through  server  configuration  or  consolidation,  adding 
bandwidth  or  rewriting  an  application. 

Danny  Cornell,  chief  architect  at  online  brokerage 
firm  Ameritrade,  tells  a  similar  story  about  building 
out  his  company’s  network  when  the  economy 
boomed  a  few  years  ago.  Gomel!  says  he  and  his  staff 
had  to  rebuild  Ameritrade’s  infrastructure  every  nine 
months  because  their  techniques  for  capacity  plan¬ 
ning  fell  short  when  predicting  rapid  growth. 

“Our  planning  was  done  completely  anecdotally.  It  was 
a  seat-of-the-pants  exercise  that  really  lacked  any  analyti¬ 


cal  data,”  Gornell  says. 

Gornell  and  his  staff  started  using  BMC’s  two 
offerings  that  work  together  for  capacity  plan¬ 
ning,  Patrol  Perform  and  Patrol  Predict.  He 
could  determine  the  number  of  Web  servers 
needed  to  support  the  expanding  online  busi¬ 
ness,  without  overprovisioning  the  network. 

Mostly,  BMC’s  software  helped  Gornell  deter¬ 
mine  the  number  of  servers  he’d  need  to  keep 
delivering  business  services,  and  the  software  predicts 
the  impact  of  system  changes  before  they  occur.  BMC 
software  agents  reside  on  each  managed  server  and 
report  application  response  time,  CPU  utilization  and 
network  availability  The  capacity  planning  software  then 
uses  the  data  to  project  what  will  be  needed  to  sustain 
future  business  services  and  users. 

Now  with  the  economy  in  the  doldrums,  Gornell  says 
his  days  of  overprovisioning  have  ended,  and  he’s 
using  the  same  tools  from  BMC  to  uncover  underuti¬ 


lized  resources  and  avoid  purchasing  more  hardware. 
“Now  we’re  using  it  in  a  diametrically  opposed  way. 
We’re  trying  to  consolidate  our  systems  and  servers, 
and  still  meet  business  objectives,”  he  says. 

Although  Payton  and  Gornell  say  the  tools  have 
helped  them  better  plan  their  networks,  the  two  are 
quick  to  add  that  these  software  tools  do  not  represent  a 
cure-all  for  capacity  planning  woes.  Capacity  planning 
requires  knowledge  of  how  all  the  network  elements 
interact  and  perform. That  only  comes  from  years  of 
study  and  experience  with  networks. 

“This  is  not  a  plug-and-play  tool.  It  requires  the  right 
human  resources  and  human  interaction  to  do  the  cor¬ 
rect  analysis.  It’s  not  going  to  do  the  work  of  the  engi¬ 
neers,”  Gornell  says. 

Payton  likens  his  capacity  planning  tool  to  a  Magic  8 
Ball:“lf  you  ask  it  the  wrong  question,  it  will  still  give  you 
a  nifty  answer,  but  that  may  not  solve  your  problem.You 
need  to  know  the  right  questions  to  ask.” 

He  says  capacity  planning  is  an  art  form  —  one  that 


requires  an  artist  skilled  in  advanced  mathematics  and 
statistical  analysis,  with  an  eye  for  spotting  behavior  pat¬ 
terns  in  volumes  of  data. 

Industry  experts  echo  those  warnings  and  go  a  step 
further,  explaining  why  the  current  capacity  planning 
offerings  will  not  solve  many  of  a  network  executive’s 
problems.  Users  have  not  expressed  much  interest  in 
long-term  planning  tools,  opting  more  for  quick  fixes 
that  sometimes  don’t  solve  the  problems  and  prompt 
network  managers  to  overprovision  their  nets,  says  Jean- 
Pierre  Garbani,  an  analyst  at  Giga  Information  Group. 

Garbani  says  vendors  will  better  address  capacity 
planning  in  2002.  For  now,  he  says  only  BMC  comes 
close  to  helping  network  architects  account  for  all  the 
elements  in  a  distributed  environment  when  planning 
future  nets.  And  although  he  says  BMC  has  the  capa¬ 
bility  to  offer  a  complete  capacity  planning  tool  kit,  its 
current  products  don’t  address  all  users’  needs,  partly 
because  demand  for  such  tools  is  low. 

Capacity  planning  tools 
from  vendors  such  as 
Computer  Associates  and 
Hewlett-Packard  are  fun¬ 
damentally  performance 
management  tools  with 
some  extra  reporting 
capabilities,  Garbani  says. 
Others  such  as  Opnet  and 
Compuware  offer  the 
modeling  and  predictive 
analysis  he  thinks  is  essen¬ 
tial  to  capacity  planning 
in  large  enterprise  net¬ 
works  —  but  they  look 
only  at  a  single  function, 
such  as  server  capacity, 
application  performance 
or  WAN  bandwidth. 

Jeff  Nudler,  an  analyst 
at  Enterprise  Manage¬ 
ment  Associates,  agrees 
there  are  no  tools  cur¬ 
rently  available  that  com¬ 
pletely  address  capacity  planning  needs.  He  says  net¬ 
work  architects  need  to  know 
in  real  time  how  to  plan  for  capacity  in  their 
networks. 

Clairvoyant’s  ForeCast  Manager  —  software  that  col¬ 
lects  real-time  and  historical  data,  spotting  behavior  pat¬ 
terns  and  offering  fixes  —  most  closely  fits  the  bill  for 
Nudler,  but  even  this  tool  can  only  predict  as  well  as  the 
user  can. 

As  Payton  and  Gornell  say,  the  tools  do  not  make  deci¬ 
sions  or  do  the  planning. The  tools  expedite  the  collec¬ 
tion  of  data  from  many  disparate  sources  of  an  infra¬ 
structure  and  offer  some  correlation.  But  in  terms  of  pre¬ 
dicting  the  network  future,  the  network  architect  in  part 
controls  the  software’s  outcome. 

“Capacity  planning  has  long  been  considered  the 
black  magic  of  the  IT  industry.  How  does  one  predict  the 
future?”  Nudler  says.“Even  with  all  the  tools,  equations, 
algorithms  and  mathematics,  it’s  impossible  to  calculate 
how  a  network  will  behave."  ■ 
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Predicting  the  net  future 

Most  capacity  planning  tools  fall  into  one  of  three  categories.  Here’s  a  sample  of  what’s 
available  today. 


Category 

Statistical  long-term 
data  collection 

Statistical  real-time 
data  collection 

Predictive  modeling 

What  it  does 

Collects  historical  performance 
data  and  spots  net  behavior 
trends. 

Collects  data  in  real  time  and 
predicts  when  (within  90  days) 
capacity  will  run  out. 

Creates  virtual  networks, 
simulates  traffic  and  profiles 
applications  to  plan  future  net 
deployments. 

What’s  good 

Isolates  network  performance 
issues  that  can  only  be  detected 
overtime. 

Solves  more  immediate 
problems. 

Lets  users  pose  “what-if" 
scenarios  and  prevent  over- 
provisioning  the  network. 

What’s  not 
so  good 

The  software  needs  a  lot  of  data 
to  make  intelligent  decisions. 

Doesn’t  address  long-term 
capacity  needs. 

Can’t  predict  with  100% 
accuracy  how  a  network  will 
respond  under  all  conditions. 

Who  sells  it 

NetScout,  Aprisma 

Clairvoyant,  Computer 
Associates 

BMC,  Opnet  and  Compuware 

You're  right,  Dell  doesn't  have  one  service  person  with  all  the  answers. 
There  are  thousands  more  where  Carl  came  from. 
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Dell  |  Enterprise 

I  am  Dell  Enterprise.  PowerEdge™  servers,  PowerVault™  storage,  infrastructure  software,  and  Premier  Enterprise  Services. 

And  I  am  backed  by  thousands  of  service  and  support  people:  on-site,  online  and  on  the  phone.  Each  able  to  point  to  the  solution,  instead 


of  pointing  fingers.  Surprised?  You  shouldn't  be.  Because  when  Dell  builds  your  custom  Intel®  processor-based  server  and  storage 
solution,  Dell  also  builds  a  total  knowledge  base.  From  configs  to  upgrades  to  service,  Dell  puts  your  entire  history  at  your  support  team's 


fingertips,  24/7.  All  it  takes  is  one  walk  down  the  hall,  one  e-mail  or  one  phone  call  to  start  answering  your  questions.  So  you  can 
increase  uptime.  Speed  deployment.  And  cut  costs. 


That’s  why  Dell  is  ranked  #1  in  customer  satisfaction  for  Intel®  processor-based  servers."  To  learn  what  customers  and  analysts  are 
saying  about  Dell  Enterprise,  visit  us  at  dell.com/enterprise3. 


Total  accountability.  On-site,  online,  on  the  phone.  Easy  as 
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Call  1-877-430-DELL  or  visit  www.dell.com/enterprise3 
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DSView  gives  you  ‘point  and  click' 
access  and  control  of  all  the  KVM 
and  serial  devices  in  your  data  center. 


With  the  new  DSR  analog/digital  KVM 
switches,  your  choices  for  access 
and  control  have  never  been  better. 

See  our  latest  designs  at 
www.avocent.com 


The  Power  of  Being  There 


For  a  FREE  Smart  Server  Management  Guide  and  more  information  about  our  connectivity  solutions, 

visit  www.avocent.com  or  call  1-866-AVOCENT  (286-2368). 

Avocent,  the  Avocent  logo,  ‘The  Power  of  Being  There’  and  ‘KVM  over  IP’  are  trademarks  of  Avocent  Corporation.  Copyright  2001. 
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Intel  remains  committed  to  hosting  service 


■  BY  JENNIFER  MEARS 

SANTA  CLARA — When  Intel  announced 
it  was  entering  the  managed-hosting  game 
two  years  ago,  financial  analysts  scratched 
their  heads. 


■  Sprint  revealed  last  week  that  it 
has  completed  its  10G  bit/sec  trans- 
Atlantic  IP  backbone  connecting  11 
major  European  cities  to  Sprint's 
SprintLink  IP  backbone  in  North 
America.  Sprint  will  use  the  back¬ 
bone  to  offer  IP  services  to  global 
corporations.  Sprint’s  initial  Euro¬ 
pean  products  include  IP  VPNs,  col¬ 
location  services,  managed  services 
and  security  services,  www.sprint 
.com 

■  The  Edison,  N.J.,  school  system  has 
signed  a  three-year  contract  with 
AT&T  to  use  its  Integrated  Network 
Connection  Service  (INCS).The  ser¬ 
vice  lets  customers  integrate  voice, 
data  and  Internet  access  over  one 
dedicated  line.  The  public  school  sys¬ 
tem  is  connecting  105  elementary  and 
secondary  schools  via  AT &T's  ser¬ 
vice.  AT&T  has  provisioned  INCS  at 
85  schools  with  20  more  expected  to 
come  online  by  the  end  of  the  month. 
www.att.com 

■  Project  Pronto,  SBC  Communications' 

effort  to  make  high-speed  Internet 
access  available  to  80%  of  its  cus¬ 
tomers  by  the  end  of  2003,  will  be 
among  the  projects  hit  by  capital 
expenditure  cutbacks  announced  last 
week  by  the  incumbent  regional  car¬ 
rier.  SBC  will  cut  capital  expenditures 
by  about  20%,  the  company  said  after 
reporting  a  drop  in  net  income  and 
revenue  in  the  third  quarter  com¬ 
pared  with  the  year-earlier  quarter. 
SBC  currently  can  offer  DSL  to 
about  23  million  customers  across  its 
service  areas,  or  about  58%  of  its 
customer  base. 


That  skepticism  still  lingers  for  many,  but 
company  executives  say  they  are  com¬ 
mitted  to  the  Intel  Online  Services  host¬ 
ing  venture,  which  in  the  last  quarter 
signed  Sony,  the  American  Stock  Ex¬ 
change,  Commerce  One  and  the  U.S. 
Army  as  customers. 

“Initially,  it’s  kind  of  hard  to  see  what  a 
company  like  Intel,  which  is  essentially  a 
[research  and  development],  engineer¬ 
ing  and  manufacturing  company  around 
chipsets  would  be  doing  getting  into  the 
services  business,” says  Joel  Yaffe,  a  senior 
analyst  at  Giga  Information  Group.“But  if 
you  take  a  step  back  and  look  at  Intel  as 
a  company  competing  in  an  increasingly 
tough  commodity  market,  a  lot  of  people 
think  services  is  the  way  to  go.” 

Roots  in  the  '90s 

Intel  latched  on  to  the  services  band¬ 
wagon  in  the  late  1990s  as  it  began  to 
move  “from  being  at  the  center  of  the  PC 
industry  to  being  at  the  center  of  the 
Internet  economy”  according  to  its  1999 
annual  report.  It  formed  the  New 
Business  Group  to  develop  new  ventures 
aimed  at  Internet  services  and  products. 

But  as  the  economy  softened  this  year, 
many  of  those  ventures  failed.  In  Feb¬ 
ruary,  Intel  shut  down  Intel  Media  Ser¬ 
vices,  which  was  launched  to  host 
streaming  audio  and  video.  ICat,  an 
e-commerce  hosting  service,  also  was 
shuttered  in  February.  While  some  ana¬ 
lysts  expected  the  ax  to  fall  next  on  Intel 
Online  Services,  the  company  shed  some 


Intel  steps  into  hosting 

Here’s  how  Intel  Online  Services  has  evolved: 


September  1999 

Intel  Online  Services 
launches  with  a  full- 
service  facility  in 
Santa  Clara  and  a 
development  facility 
in  Folsom,  Calif. 


April  2000 

Data  center  opens  in  Chantilly,  Va.  Intel 
Online  Services  says  it  plans  to  have 
more  than  12  Internet  data  centers 
online  and  invest  $1  billion  by  year-end. 


July  2000 

Unveils  AppChoice  Managed 
Hosting,  a  pretested  hosting 
platform  for  managing 
applications. 


May  2000 

Signs  marketing  agreement  with 
PricewaterhouseCoopers;  opens  data 
centers  in  Seoul,  Korea  and  near 
Reading,  England. 


i  i 


August  2000 

Opens  data  centers 
in  Mumbai,  India  and 
Sidney,  Australia. 
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'2000 


October  2000  — 

Joins  with  Beijing 
Telecom  to 
provide  hosting 
services  in  China. 


November  2000  - 

Teams  with  EMC  and 
Akamai  to  provide 
storage  and  content- 
delivery  services. 

December  2000  — 


>2001 


Ends  year  with  only  eight  of 
12  planned  data  centers. 


i - 

March  2001 

Announces 
Intel  Online 
Services  ASP 
Accelerator 
Program. 

August  2001  - 

American  Stock  Exchange  selects  Intel  Online 
Services  as  its  managed  hosting  provider. 


July  2001  - 

Teams  with 
Commerce  One  to 
provide  managed 
application  services. 


staff  in  May  and  kept  going. 

“We’re  in  the  process  of  building  a 
strong  business,” says  Mark  Olson, Intel  On¬ 
line  Services  marketing  director.  “Times 
are  really  hard  right  now,  and  everybody  is 
speculating  what’s  going  to  happen.  We’re 
quite  aggressively  going  after  business.” 

Intel  Online  Services  is  waiving  migra¬ 
tion  fees  —  up  to  $100,000  —  for  any 


business  that  moves  to  its  data  centers  by 
Nov.  30.  “We  think  we  represent  a  much 
more  stable  environment  than  a  lot  of 
other  hosters  do  today”  Olson  says. 

Michael  Osborn,  vice  president  of 
sales  and  technology  at  eVineyard,  saw 
Intel  Online  Services  as  a  safe  bet.  The 
online  wine  retailer  moved  to  Intel 

See  Intel,  page  32 


Keynote  launches  wireless  monitoring 

New  service  fills  void  left  by  lack  of  service-level  agreements. 


■  BY  DENISE  PAPPALARDO 

Keynote  Systems  is  launching  a  new 
monitoring  service,  this  time  inspecting 
the  performance  of  wireless  —  as 
opposed  to  landline  —  Internet  service 
providers. 

The  Keynote  Wireless  Perspective  ser¬ 
vice  lets  users  better  understand  the  per¬ 
formance  over  their  wireless  service 
provider’s  network,  the  company  says. 

Service-level  agreements  (SLA)  for 
wireless  Internet  access  or  other  mobile 
data  services,  such  as  Short  Message 
Service,  are  not  currently  offered.  To 


determine  how  these  services  perform, 
users  must  turn  to  third-party  companies 
such  as  Keynote. 

“Wireless  data  services  are  still  new  to 
users  and  service  providers,”  says  Chuck 
Mount,  general  manager  of  wireless 
products  at  Keynote. “There  are  a  host  of 
issues  that  can  impact  performance.” 

Keynote  Systems  is  known  for  its  land¬ 
line  Internet  performance  services, 
which  monitor  the  speed,  availability 
and  reliability  of  ISP  networks. 

For  the  wireless  service,  Keynote  is 
deploying  software  and  hardware  agents 
at  10  sites  in  the  U.S.  and  the  U.K.  These 


agents  can  gather  real-time  information 
about  how  long  it  takes  for  a  Web  page 
or  application  to  be  displayed  on  a 
handheld  device. 

The  agent  imitates  a  typical  wireless 
user.  It  sends  and  receives  wireless  mes¬ 
sages,  purchases  items  over  the  Internet, 
trades  stocks  or  simply  views  certain 
Web  sites.  The  agent  gathers  this  infor¬ 
mation  and  sends  it  to  Keynote’s  data¬ 
base  system  where  the  performance 
information  is  stored. 

The  system  is  also  designed  to  alert 
users  if  transactions  take  more  than  a 
See  Keynote,  page  32 
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What  went  wrong  with  Sprint’s  Inte¬ 
grated  On-Demand  Network?  Here 
is  my  take: 

ION  was  only  available  in  the  continen¬ 
tal  U.S.,  where  voice  and  data  transport  is 
ubiquitous,  highly  reliable  and  inexpen¬ 
sive. 

The  real  need  for  a  service  like  this  is  to 
connect  with  developing  nations  that  cur¬ 
rently  lack  those  qualities  in  their  voice 
and  data  transport  services. 

Compared  with  existing  domestic  trans¬ 
port  services,  it’s  virtually  impossible  for 
an  ION-like  service  to  save  customers 
money,  particularly  when  charging  a  pre¬ 
mium  for  managing  customer  sites.This  is 
especially  significant  because  in  many 


The  demise  of  ION  wasn't  exactly  a  mystery 


cases,  customers  found  they  continued  to 
need  non-ION  local  and  long-distance 
services  at  lON-equipped  sites,  making  it 
more  expensive  to  manage  these  sites 
(they  had  to  retain  head  count)  not  less. 

As  a  managed,  nontariffed  service,  cal¬ 
culating  true  costs  and  savings  opportu¬ 
nities  was  also  anything  but  simple  and 
quick,  and  added  to  the  cost  of  doing 
business. 

My  general  rule  of  thumb  is  that  com¬ 
panies  should  seriously  consider  switch¬ 
ing  providers  or  services  if  they  will  save 
20%  to  25%  net  in  a  contract  period  com¬ 
pared  with  renegotiating  an  optimized 
infrastructure  using  services  already  in 
place.  If  that  much  money  cannot  be 
saved,  customer  interests  are  often  best 
served  simply  by  issuing  a  request  for  pro¬ 
posal  and/or  renegotiating  prices  for 
existing  services. 

As  a  technology,  ION  attempted  to  en¬ 
courage  bundling  of  voice  and  data  ser¬ 
vices,  but  failed  to  provide  the  risk-ame¬ 
lioration  measures  companies  require  in 


return.  It  lacked  service-level  agreements 
and  was  supported  by  a  relatively  small 
network  infrastructure  —  12  nodes. 

Although  an  appropriate  size  for  the 
customers  it  served,  that  size  network  is 
far  too  small  for  companies  to  move  the 
bulk  of  their  traffic  onto. Too  many  eggs  in 
too  few  (switching)  baskets. 

Finally,  ION  only  supported  a  subset  of 
pre-existing  services,  and  customers  want 
full  backwards-compatibility  with  major 
transport  services  and  features.  ION’s 
bandwidth  was  also  not  as  flexible  as  cus¬ 
tomers  expected, and  as  at  least  one  com¬ 
petitor  delivered  (AT&T  INCS). 

Until  it  was  far  too  late,  Sprint  continued 
to  assume  that  large  companies  would 
rapidly  migrate  from  their  existing  services 
portfolios  to  ION.  In  the  history  of  telecom¬ 
munications,  such  behavior  would  be  a 
first.  Businesses  try  new  services  and  then 
use  them  very  selectively  before  making 
big  commitments.  Migration  periods  can 
easily  extend  two  to  three  years. 

In  contrast  toT-1  sites,  more  than  90%  of 


sites  that  used  ION  were  DSL  sites  that 
often  had  unpleasant  experiences  using 
incumbent  local  exchange  carrier  ser¬ 
vice.  This  is  a  critical  market,  even  for 
enterprise  customers,  because  many 
telecommuters  work  for  large  compa¬ 
nies.  ION  offered  a  viable  solution,  but  the 
costs  of  implementing  service  were  too 
high,  making  the  payback  too  long. 

Sprint  has  stated  in  plain  terms  that  it 
will  not  support  ION;  existing  users  will 
be  taken  off  the  platform  over  an  unspec¬ 
ified,  but  short,  period  of  time. 

My  advice  to  affected  customers  is  to 
expect  Sprint  to  accommodate  your  spe¬ 
cific  migration  plans  and  requirements, 
including  obtaining  favorable  prices  on 
existing  services. 

Think  long  and  hard  before  agreeing  to 
automatically  extend  contract  term 
lengths  in  return. 

Pierce  is  a  research  fellow  at  Giga 
Information  Group.  She  can  be  reached  at 
lpierce@gigaweb.  com. 
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Online  Services  last  year  after 
its  application  service  provider, 
Pandesic  —  a  joint  venture 
between  Intel  and  SAP  — 
failed.  Osborn  says  he  wanted 
to  stay  in  the  Intel  family  and 
has  few  worries  about  Intel 
Online  Services  folding. 

“We  wanted  to  be  with  Intel,  or 


a  company  like  Intel,  who  had 
other  business  in  addition  to 
hosting,”  Osborn  says. “Obviously 
time  has  demonstrated  that  hav¬ 
ing  a  diversified  business  is  one 
thing  that  allows  you  to  succeed 
when  your  customer  base  goes 
sideways.” 

Industry  analysts  say  Intel  On¬ 
line  Services  may  have  what  it 
takes  to  ride  out  the  shaky  econ¬ 
omy  and  changing  market  land¬ 
scape  that  has  meant  trouble  for 
other  hosiers,  most  notably  mar¬ 
ket  leader  Exodus. 

For  one  thing,  Intel  Online  Ser¬ 
vices  has  a  parent  with  deep 
pockets.  Another  is  that  Intel 
launched  its  hosting  venture 
focused  squarely  on  managed 
services,  which  analysts  say  is 
expected  to  fuel  market  growth. 


Research  firm  1DC,  for  example, 
expects  the  hosting  market  to 
more  than  triple  from  $4.8  bil¬ 
lion  this  year,  to  $16.1  billion  in 
2005,  with  as  much  as  80%  of 
that  revenue  coming  from  man¬ 
aged  services. 

Intel  provides  managed  ser¬ 
vices  that  are  built  on  its  exten¬ 
sive  knowledge  of  network 
equipment  and  its  experience 
hosting  its  own  Web  sites.  The 


company  offers  preconfigured 
hosting  platforms  and  colloca¬ 
tion.  A  little  more  than  six 
months  after  launching,  Intel 
Online  Services  enhanced  the 
services  it  offered  by  unveiling 


More  online! 


Find  out  more  about  Intel  Online  Services 
with  a  FAQ  page  and  vrtual  tour. 
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AppChoice,  which  lets  cus¬ 
tomers  integrate  their  applica¬ 
tions  into  a  pretested,  managed 
platform. 

Intel  was  the  first  hosting  pro¬ 
vider  “to  clearly  articulate  the 
‘repeatable  elements/modular 
building  block’  approach  to 
hosting,”  says  Melanie  Posey,  pro¬ 
gram  manager  for  Web  hosting 
at  IDC. 

Another  area  where  Intel  made 
a  smart  decision  was  in  the  area 
of  capital  expenditures,  analysts 
say  While  other  hosters,  such  as 
Exodus,  continued  aggressive 
build-out  plans  even  as  demand 
slowed,  Intel  Online  Services 
scaled  back. 

In  early  2000,  Intel  Online  Ser¬ 
vices  said  it  would  spend  $1  bil¬ 
lion  by  year-end,  mostly  on 
building  and  equipping  12  data 
centers.  It  projected  to  have  20 
data  centers  by  the  end  of  2001. 
But  when  market  conditions 
turned,  Intel  Online  Services 
halted  building  plans.  It  ended 
2000  with  eight  data  centers  in 
the  U.S.,  Europe  and  Asia,  and  is 
holding  steady. 

“One  thing  to  their  credit  is 
that  they  noticed  early  on  that 
demand  was  slowing  and  they 
stopped  their  infrastructure 
buildout,”  says  Jay  Slattery,  an 
analyst  with  Technology  Bus¬ 
iness  Research.  “That’s  some¬ 
thing  that  Exodus  and  some  of 
the  other  major  players  certainly 
missed.” 

Still, Slattery  and  other  analysts 
remain  skeptical  about  Intel’s 
foothold  in  the  hosting  industry 
Intel  is  tight-lipped  about  its 
hosting  division’s  performance, 


and  analysts  suspect  the  venture 
isn’t  making  money.  As  for  mar¬ 
ket  share,  one  analyst  calls  it 
“micropercentages.” 

Andrew  Shroepfer,  president  of 
Tier  1  Research,  says  because  of 
the  scarcity  of  concrete  informa¬ 
tion  about  Intel  Online  Services’ 
financial  situation, it’s  hard  to  say 
whether  the  unit  is  something 
Intel  should  maintain.  If  it  is  dis¬ 
carded,  Schroepfer  says  it  would 
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specified  amount  of  time. 

The  performance  tests  can  be 
run  every  5  minutes  up  to  every 
hour  depending  on  user 
requirements.The  system  works 
with  25  handheld  devices, 
including  Wireless  Application 
Protocol-enabled  phones,  inter¬ 
active  pagers  or  PDAs. 

Users  can  view  real-time  or 
historical  data  regarding  net¬ 
work  availability,  usage  and 
transaction  performance. 

The  service  is  also  geared 
toward  wireless  service  pro¬ 
viders  and  content-delivery  ser¬ 
vice  providers  that  are  interested 
in  keeping  a  closer  eye  on  their 
network  performance. 

Earlier  this  year  Keynote  ac¬ 
quired  privately  held  OnDe- 
vice,  which  developed  the  wire¬ 
less  monitoring  technology 
that  Keynote  is  using  to  support 
Wireless  Fterspective.  OnDevice 
is  now  Keynote’s  wireless 
division. 

The  service  is  available  now 
starting  at  $5,000  per  month. 


make  sense  for  Intel  to  keep  the 
testing  lab  that  Intel  Online  Ser¬ 
vices  uses  to  preconfigure  and 
stress-test  hosting  platforms. 

Nevertheless,  Intel  Online  Ser¬ 
vices’  hundreds  of  customers 
seem  satisfied  with  the  service 
they’re  getting. 

“The  fact  is,”  says  eVineyard’s 
Osborn,  “Intel  Online  Services 
is  providing  a  great  set  of 

services.”  ■ 


Wireless  service 
monitoring 

Keynote  Wireless  Perspective 
service  lets  users  monitor 
the  performance  of  their 
wireless  Internet  access 
service.  The  service  includes: 

•  Performance  monitoring  over 
multiple  wireless  service 
provider  networks. 

•  Measurements  ofWeb  page 
load  and  transaction  times. 

•  Real-time  and  historical 
delivery  times  for  Short 
Message  Services. 

•  Wireless  Application  Protocol 
availability  over  multiple 
networks. 

•  System-  and  event-error 
alerts. 

The  price  varies  depending  on 
the  number  of  wireless  net¬ 
works  to  be  monitored,  the 
number  of  monitoring  sites,  the 
number  of  URLs  that  are  mea¬ 
sured,  and  the  frequency  that 
they  are  monitored. 

Keynote:  www.keynote.com 
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like  Intel,  who  had  other  business  in  addition 
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■  SERVICE  PROVIDER  DEVELOPMENTS 
AT  THE  JUNCTURE  BETWEEN  THE  ENTERPRISE 
AND  THE  NEW  PUBLIC  NETWORK 


Softswitch  heyday  has  to  wait  awhile 


■  BY  TIM  GREENE 

While  softswitches  are  considered  key  to 
next-generation  voice  networks,  their 
prime  time  is  still  at  least  a  year  away. 

Softswitches  —  servers  that  control 
voice  phone  calls  across  circuit-  and 
packet-switched  networks  —  promise  to 
support  intriguing  new  services  by  dint  of 
their  open  application  programming  inter¬ 
faces  for  service  software. 

Softswitch  vendor  Sylantro’s  CallRio  soft¬ 
ware  blends  voice  phone  service,  Internet 
access  and  messaging.  Customers  connect 
to  a  Web  site  to  see  a  list  of  who  has  called 
on  the  phone.  Users  click  on  the  messages 
they  want  to  return,  and  the  network  dials 
the  calls  for  them.  The  service  is  available 
from  GoBeam,a  provider  in  California. 

But  the  reality  is  that  major  carriers  with 


■  Quantum  Bridge  Communications  last  week 
announced  partnerships  with  five  storage-area 
network  vendors  to  deploy  storage  services  to 
companies.  Quantum  Bridge  has  aligned  itself  with 
Emulex,  McData,  Qlogic,  SAN  Valley  Systems  and 
Brocade  Communications.  Quantum  Bridge  claims 
cost  barriers  have  prevented  the  mass  rollout  of 
managed  storage  services.  Quantum  Bridge  will 
combine  its  QB8000  dense  wavelength  division  mul¬ 
tiplexer  system  with  gateways,  Fibre  Channel 
switches  and  host  bus  adapters  from  their  SAN 
partners,  www.quantumbridge.com 

■  Storm  Telecommunications  a  London  service 
provider,  is  now  offering  VPN  services  based  on 
Riverstone  Networks  switches  in  six  European 
cities  and  New  York.  Storm  has  deployed  River¬ 
stone's  RS  8600  switches  for  delivering  Multi-proto¬ 
col  Label  Switching-based  VPN  services  at  speeds 
up  to  1G  bit/sec  to  business  subscribers.  POPs  in 
the  pan-European  ring  are  connected  via  optical 
routers  from  Sycamore  Networks.  Storm’s  MPLS 
VPN  service  is  based  on  "Draft  Martini,”  a  develop¬ 
ing  standard  for  setting  up  VPNs  on  a  Layer  2 
Ethernet  network  with  MPLS  tags  used  to  differen¬ 
tiate  customer  traffic  flows  and  provide  security. 
The  Draft  Martini  software  runs  on  modules  in  the 
RS  8600s.  www.stormtel.com,  www.riverstonenet. 
com 


wide  serving  areas  will  not  use  these 
switches  to  deliver  new  services  for  years, 
analysts  say  Using  softswitches  as  a  re¬ 
placement  for  current  local  voice  switches 
is  “a  2003  event  at  the  earliest”  for  the  reg¬ 
ional  Bell  operating  companies,  according 
to  a  report  last  week  by  financial  firm  UBS 
Warburg. 

“So  far  we  are  just  in  the  early  wave  of 
this  trend,"  says  Tom  Valovic,  an  analyst 
with  market  research  firm  IDC.He  predicts 
incumbent  carriers  will  start  buying 
softswitches  in  bulk  in  2002  and  2003. 
RBOCs  and  other  major  carriers  have 
been  hit  by  the  downturn  in  the  economy 
and  are  slowing  network  spending.  Many 
competitive  local  carriers  have  folded  or 
are  in  financial  trouble, so  RBOCs  feel  less 
urgency  to  change. 

That  doesn’t  mean  softswitches  are  failing 
to  make  inroads.  Level  3 
Communications,  the  inter¬ 
national  IP  network  provider, 
says  it  will  use  Sonus 
Networks’  softswitches  to 
support  its  wholesale  IP 
voice  services. 

Smaller  carriers  trying  to 
build  networks  less  expen¬ 
sively  and  compete  with 
local  phone  companies  are 
also  drawn  to  softswitches. 
ACD.net,  a  service  provider 
based  in  East  Lansing,  Mich., 


Softswitches:  Not  yet 

Annual  worldwide  sales  of 
softswitches  will  soar  from  an 
estimated  $610  million  this  year 
to  $4.4  billion  in  2005,  but  the 
heavy  spending  upturn  won’t 
kick  in  until  2003. 

Projected  annual  percentage 
increase  in  softswitch  sales: 
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uses  Convergent  softswitches  to  trunk  traf¬ 
fic  today  and  plans  to  support  voice  ser¬ 
vices  over  DSL,  a  spokesman  says. 

The  attraction  softswitches  hold  is  that 
they  cost  about  a  tenth  of  regular  local 
phone  switches,  take  up  much  less  space, 
and  have  open  APIs  that  let  third-party  ven¬ 
dors  write  complex  services  the  switches 
control.  They  also  enable  completion  of 
calls  between  circuit-switched  and  packet 
networks,  letting  carriers  use  a  single  pack¬ 


et  backbone  for  voice  and  data  traffic. 

Because  RBOCs  still  provide  most  local 
phone  services,  these  telecom  giants  must 
adopt  softswitches  before  advanced  ser¬ 
vices  become  widely  available,  Valovic 
says.  That  migration  will  evolve  slowly  but 
has  begun. 

Recently,  Qwest  Communications  and 
Verizon  said  they  use  softswitches  in  their 
networks.  Qwest  uses  a  Nortel  softswitch 
to  trunk  voice  traffic  within  its  network  in 
Boise,  Idaho.  Verizon  uses  Telica  soft- 
switches  to  handle  data  phone  calls  to 
the  Internet,  and  BellSouth  uses  Sonus 
softswitches  for  the  same  purpose. 

This  so-called  Internet-offload  applica¬ 
tion  is  currently  the  most  practical  use  of 
softswitches.  Rather  than  spend  millions 
to  buy  traditional  circuit  switches  to  han¬ 
dle  Internet  data  calls,  carriers  use  less 
expensive  softswitches. 

But  this  market  is  dwindling,  USB  Warburg 
analyst  NikosTheodosopoulos  says. 

“Internet  off-load  is  today’s  opportunity, 
but  it  is  in  the  late  innings,”  he  says  in  a 
report. 

Only  later  will  service  providers  use  them 
as  local  or  Class  5  switches  to  enable  ad¬ 
vanced  services,  Valovic  says.  But  the 
RBOCs  have  not  announced  the  decision 
to  proceed  in  this  direction. 

In  fact,  at  Verizon  the  jury  is  still  out,  says 
Brad  Frison,  a  senior  network  planner  at 
RBOC.B 


Alcatel  upgrades  multiservice  switch 


■  BY  JIM  DUFFY 

Alcatel  has  unveiled  a  new  release  of  its  7670  Routing 
Switch  Platform  that  features  upgraded  scalability,  support 
for  Multi-protocol  Label  Switching  and  low-speed  multiser¬ 
vice  data  interfaces. 

The  7670  is  an  ATM  edge  and  core  switch  that  goes  up 
against  ATM  switches  from  Lucent,  Nortel,  Cisco  and  Mar¬ 
coni,  and  start-ups  Equipe  Communications,  WaveSmith 
Networks  and  MPLS  core  switch  maker  Tenor  Networks. 

Release  2  of  the  7670  lets  the  switch  scale  from  2.4G  bit/ 
sec  for  edge  applications  to  450G  bit/sec  in  the  core  when 
fully  configured  with  four  shelves,  Alcatel  says.  The  switch 
had  been  limited  to  50G  bit/sec  for  core  applications. 

In  a  single-shelf  configuration,  the  7670  supports  224  OC- 
3c  or  DS-3,or  56  OC-12c,or  14  OC-48c  or  56  Gigabit  Ethernet 
ports.  Fully  configured  with  four  shelves,  the  7670  sports 
1,760  OC-3c/DS-3,  440  OC-12,  124  OCM8c  or  440  Gigabit 
Ethernet  ports. 

MPLS  support  means  the  7670  can  now  provide  MPLS 


mediation,  label  edge  routing, label  switch  routing  and  ATM 
switching  on  one  platform. MPLS  mediation  is  in  the  form  of 
a  gateway  that  lets  ATM  traffic  be  carried  over  an  MPLS 
packet  core  using  label  switched  paths. 

The  introduction  of  the  Edge  Services  Extender  brings 
low-speed  T-l/E-1  andT-3/E-3  multiservice  interfaces  to  the 
7670.  The  switch  can  support  up  to  500  DS-ls  for  edge 
aggregation. 

Some  analysts  gave  Release  2  only  a  lukewarm  reception. 
Alcatel  won’t  ship  RSP  until  March  2002,  and  true  450G- 
bit/sec  capacity  won’t  be  seen  until  the  vendor  fits  the  sys¬ 
tem  with  10G  bit/sec  OC-192c  interfaces  later  on. 

“General  availability  is  quite  a  ways  away  with  time  for 
things  to  potentially  go  wrong  or  for  competitors  to  re¬ 
spond,”  Current  Analysis  said  in  a  recent  report.’Mf  this  was 
a  release,  rather  than  an  announcement  of  a  planned  fu¬ 
ture  occurrence,  Release  2  would  put  Alcatel  in  a  solid 
competitive  position  today  with  the  competing  platforms 
from  established  vendors,  but  the  system  is  at  a  scalability 
disadvantage  compared  to  some  start-ups.”  ■ 
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For  guaranteed  IP  performance, 
don’t  just  take  your  service 
provider’s  word  for  it.  Make  them 
prove  it  -  with  Brix  Networks. 


Networks 

A  MEASURE  ABOVE 


You're  an  enterprise  IT  professional.  You've  partnered  with 
a  service  provider.  And  you've  signed  the  SLA.  So,  how  do 
you  really  know  you're  getting  all  that's  been  promised? 


For  the  latest  independent  research  on  the  vital  role  SLA 
verification  plays  when  enterprises  choose  a  service  provider, 

visit  www.brixnet.com/sagewp. 


Take  the  guesswork  out  of  your  SLAs.  Choose  a  provider 
who  has  a  network  Built  with  Brix.  The  Brix  System  is  the 
only  complete  solution  that  proactively  measures  and 
guarantees  advanced  IP  services.  And,  Brix  verifies  the  real¬ 
time,  end-to-end  performance  of  VPNs,  VoIP,  streaming 
media,  and  hosted  applications. 


1-888-BRIXNET  •  1-978-367-5600 
info@brixnet.com  •  www.brixnet.com 
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■  AN  INSIDE  LOOK  AT  THE 
TECHNOLOGIES  AND  STANDARDS 
SHAPING  YOUR  NETWORK 


SMP  boosts  scalability  for  net  elements 


■  BY  PAUL  LEROUX 

High-end  network  elements  are  starting 
to  have  trouble  delivering  the  sheer  pro¬ 
cessing  power  demanded  by  the  band¬ 
width  explosion. 

For  instance,  in  core  routers  the  control- 
plane  CPU  must  now  maintain  a  routing 
table  of  500,000  or  more  entries, using  com¬ 
pute-intensive  protocols  such  as  Open 
Shortest  Path  First.  On  top  of  that,  the  CPU 
must  perform  administrative  and  manage¬ 
ment  functions,  process  SNMP  packets, 
download  new  routes  to  each  line  card 
and  support  operator  consoles. 

Problem  is,  many  control-plane  CPUs 
have  hit  the  wall. 

Can  newer,  faster  CPUs  address  the 
issue?  Not  likely,  because  computational 
demands  are  accelerating  faster  than  CPU 
performance.  Consequently,  many  systems 
designers  are  attempting  to  distribute  the 
workload  across  multiple  CPUs,  using 
symmetric  multiprocessing  (SMP). 

SMP  lets  multiple  CPUs  share  the  same 
board,  memory  I/O  and  operating  system. 
Nonetheless,  each  CPU  in  an  SMP  system 
can  act  independently  While  one  CPU  han¬ 
dles  a  database  lookup,  others  can  update 
the  database  and  perform  other  tasks. 

SMP  costs  relatively  little.  When  scaling 
from  one  CPU  to  two,  only  one  processor 
board  is  needed.  Processing  power  is  dou¬ 
bled  without  paying  for  additional  support 
chips  and  without  taking  up  an  additional 
slot  in  the  chassis. 

Using  a  microkernel  architecture  for  the 
operating  system  fits  nicely  with  SMP 
Compared  with  a  monolithic  operating  sys¬ 
tem  kernel,  a  microkernel  is  extremely 


small,  because  it  contains  only  essential  ser¬ 
vices,  such  as  process  scheduling.  All  other 
services  run  as  separate,  memory-protected 
programs.  As  a  result,  the  kernel  modifica¬ 
tions  for  SMP  are  also  small:  just  a  few  kilo¬ 
bytes  of  code.  Only  the  microkernel  is  mod¬ 
ified.  All  other  services  and  applications 
can  gain  the  performance  advantages  of 
SMP  without  code  changes.  For  instance,  a 
router  vendor  can  develop  an  application 


once,  then  deploy  it  across  a  product  line 
that  includes  single-processor  and  SMP  sys¬ 
tems.  Scalability  is  built  in. 

Availability  also  gets  a  boost.  Because 
drivers,  protocols  and  applications  all  run 
as  memory-protected  programs,  they  can’t 
corrupt  the  kernel  or  each  other.  If  any  soft¬ 
ware  process  misbehaves,  it  can  be  auto¬ 
matically  restarted  while  all  other  services 
continue  to  run. 


Despite  its  benefits, SMP  can  only  scale  so 
far.  Bottlenecks  can  occur  when  several 
CPUs  on  a  board  share  a  single  memory 
bus.  Rather  than  put  too  many  CPUs  on  the 
same  SMP  board,  designers  of  high-end 
network  elements  can  distribute  applica¬ 
tions  across  a  networked  cluster  of  SMP 
boards,  where  each  board  has  its  own 
memory  array  I/O  and  operating  system. 

This  approach  has  its  challenges.  For 
instance,  network  managers  have  to  add 
network-specific  code  to  applications  so 
they  can  “talk”  to  each  other  across  the  net¬ 
worked  boards.  Also,  because  drivers  and 
protocols  in  most  operating  systems  are 
bound  to  the  kernel,  moving  any  of  them 
from  one  board  to  another  means  you 
have  to  create  and  carefully  test  a  new  ker¬ 
nel  image  for  each  board. 

A  microkernel  operating  system  side¬ 
steps  these  problems  in  two  ways.  First, 
because  applications,  protocols  and  dri¬ 
vers  are  all  decoupled  from  the  operating 
system  kernel,  they  can  be  moved  freely 
from  one  CPU  board  to  another;  without 
the  need  for  kernel  reconfiguration. 
Second,  applications  in  a  microkernel 
operating  system  typically  communicate 
via  message  passing,  which  eliminates  the 
need  for  network-specific  code. 

The  bottom  line  is  that  SMP  hardware  and 
microkernel  operating  system  architecture 
allow  vendors  to  add  processing  power  — 
and  scalability  —  to  their  network  elements 
without  adding  software  development  or 
compromising  system  density 

Leroux  is  a  technology  analyst  at  QNX 
Software  Systems.  He  can  be  reached  at 
paull@qnx.com. 


HOW  IT  WORKS 


Symmetric  multiprocessing 

With  SMP,  the  control  plane  of  a  network  element 
can  run  many  tasks,  or  threads,  simultaneously, 
using  a  single  CPU  board.  Performance  is  improved 
dramatically,  as  is  system  density. 
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©  The  threads 
are  queued 
according  to 
their  priority. 


©  If  there  are  more  ready  ©  Multiple  threads 
threads  than  CPUs,  the  run  simultan- 

operating  system  scheduler  eously,  one  per 
will  use  thread  priority  to  CPU. 
decide  which  one  runs  first. 


Dr.  Internet 


By  Steve  Blass 


Regarding  your  Oct.  8  “NAT  woes"  column  (www. 
nwfusion.com,  DocFinder:  6665),  there  is  an 
easy  solution  if  you  are  using  the  Cisco  PIX  fire¬ 
wall.  The  alias  command  intercepts  a  DNS 
response  with  a  network  address  translation 
(public  IP)  address  and  replaces  it  with  the  pri¬ 
vate  address  of  the  server. 

Many  readers  pointed  out  that  NetBIOS  name 
look-ups  are  a  bad  long-term  solution.  One  reader 
said  outbound  packets  would  never  show  up  again 


coming  into  the  external  interface  so  the  IP  spoof¬ 
ing  comment  was  incorrect.  Internal  DNS  was  the 
most  recommended  solution,  and  I  received  multi¬ 
ple  explanations  of  the  Cisco  alias  command.  Our 
original  questioner  installed  an  internal  DNS  serv¬ 
er  for  the  growing  intranet  domain  and  solved  the 
name  resolution  problem  that  way. 

The  Cisco  alias  command  provides  a  solution  for 
redirecting  an  internal  connection  request  to  the 
internal  address  through  a  process  called  “DNS 
doctoring,"  in  which  the  firewall  router  replaces 


the  global  IP  address  with  the  internal  IP  address. 
The  alias  command  can  also  be  used  to  perform 
destination  NAT  translation.  Use  this  when  the 
Web  server  is  located  on  the  demilitarized  zone 
segment  off  of  the  firewall  router  rather  than  on 
the  internal  segment.  Details  are  available  at 
www.cisco.com/warp/public/110/alias.html. 

Blass  is  a  network  architect  at  Change 
@Work  in  Houston.  He  can  be  reached  at 
dr.internet@changeatwork.com. 
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and  partners  around  the  world.  It’s  massive  server  performance  without 
massive  hardware  costs.  To  find  out  how  to  optimize  your  supply  chain, 
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Technology  Update 


GEARHEAD 
INSIDE  THE 
NETWORK 
MACHINE 

Mark 

Gibbs 


Where  did  we  leave  it  last  week?  Oh 
yes,  driving  around  town  snooping 
for  802.11b  wireless  Ethernet  net¬ 
works.  We  discovered  12  unencrypted  net¬ 
works,  and  we  suspect  that  most  were  left 
open  by  accident  rather  than  by  intention. 

Wireless  networks  are  often  left  unse¬ 
cured  because  people  simply  don’t  under¬ 
stand  what  they’re  doing. The  default  setup 
for  the  majority  of  wireless  network  prod¬ 
ucts  doesn’t  include  security  This  means 
outsiders  can  connect  simply  by  bringing 
their  wireless-enabled  PC  within  range 
and,  if  the  networks  are  using  Dynamic 
Host  Configuration  Protocol,  refreshing  the 
dynamic  IP  lease  (see  ww.nwfusion.com, 
DocFinder:  6666). 

If  the  networks  aren’t  using  DHCPwith 
knowledge  you  gain  using  Netstumbler 
(see  www.nwfusion.com,  DocFinder: 
6667),  you  can  try  the  default  addresses 
offered  by  the  vendor  of  the  discovered 
802.1  lb  network  access  point,  or  try  scan¬ 
ning  likely  IP  address  ranges.  Finally  you 


Less  wires,  more 

can  “sniff”  passing  wireless  data  with  a  pro¬ 
tocol  analyzer  to  find  out  what  address 
ranges  are  being  used  (we’ll  discuss  this 
next  week). 

So  are  improperly  secured  wireless  net¬ 
works  a  problem?  According  to  Gartner,  by 
the  end  of  next  year  30%  of  companies 
will  “suffer  serious  security  exposures  from 
deploying  WLANS  without  implementing 
the  proper  security’ 

Yep,  we  can  believe  that.  Particularly  as 
wireless  LAN  cards  are  plummeting  in 
price  (they  are  less  than  $100  now)  letting 
corporate  users  easily  install  unsecured 
WLANs  at  their  houses  that  expose  every¬ 
thing  on  their  work  PCs  when  they  are 
home!  Or  even  more  dangerously  they 
bring  their  wireless-enabled  PCs  into  their 
offices  and  plug  into  the  corporate  net. 

This  is  where  wandering  around  with  a 
copy  of  Netstumbler  regularly  say  once  per 
week,  might  just  let  you  plug  a  gaping  wire¬ 
less  hole  in  your  corporate  network.  You 
should  also  consider  updating  your 
acceptable  use  policy  to  highlight  and 
define  the  issues  of  wireless  networking. 
Even  consider  running  briefing  sessions 
for  the  staff  so  they  can’t  say  “Gee,  I  didn’t 
know  . . .”  after  they  make  your  sales  plan 
and  corporate  budgets  available  to  the 
competition  simply  by  parking  outside 
your  offices  for  10  minutes. 


connections 

But  while  many  wireless  networks  may 
get  left  open  by  accident  and  negligence, 
there  is  an  important  social  trend  emerg¬ 
ing:  public  access  wireless  networks. 
These  are  networks  that  are  intentionally 
left  open  and  unencrypted  as  either  a  for- 
fee  or  for-free  public  service. 

For-fee  wireless  nets  are  now  in  many 
hotels  and  other  public  places,  including 
many  Starbucks  locations,  particularly 
in  the  Northwest  (www.mobilestar.net/ 
locations/ page6a.asp?paltype=SBUX  ) . 

Leading  vendors  in  this  market  are 
Mobilestar  (www.mobilestar.net/,  which 
supplies  the  Starbucks  connections)  and 
Wayport  (www.wayport.com/).  Pricing  for 
unlimited  use  of  Mobilestar  connections  is 
$59.95  per  month,  while  Wayport  charges 
$49.95  per  month  for  unlimited  access. 
Unfortunately  Mobilestar  has  hit  a  finan¬ 
cial  iceberg  and  looks  to  be  sinking. 

On  the  other  hand,  Wayport  seems  to  be 
doing  well.  We  tried  a  Wayport  connection 
at  the  Four  Seasons  Resort  in  Santa 
Barbara, Calif,  (www.fourseasons.com/sant 
abarbara /)  and  were  very  impressed.When 
you  first  connect  to  the  Wayport  network, 
any  URL  you  request  returns  a  default  page 
letting  you  log  on. 

Once  authenticated,  the  Wayport  system 
assigns  you  an  IP  address  and  lets  you 
browse  the  Web,  get  and  send  e-mail,  and 
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use,  as  far  as  we  could  determine,  pretty 
much  any  IP  protocol. Very  slick. 

But  as  we  noted  earlier,  there  are  many 
networks  that  are  not  only  open  but  also 
provide  completely  free  access.That’s  right, 
completely  free!  Why?  Because  they  want 
to.  Just  as  people  put  up  free  dial-up  bulletin 
board  systems  in  the  late  ’80s  and  early  ’90s, 
so  gearheads  everywhere  are  now  provid¬ 
ing  free  ’Net  access  for  passersby 

Groups  encouraging  and  sponsoring  the 
free  wireless  nets  are  springing  up  all  over. 
There’s  NYCwireless  in  New  York  (www. 
nycwireless.net/).  Bay  Area  Wireless  User 
Group  (www.bawug.org/),  Seattle  Wireless 
(www.seattlewireless.net/),  Consume  the 
Net  in  the  U.K.  (www.consume.net/)  ...  the 
list  is  getting  pretty  long.  See  Personal  Telco 
at  www.personaltelco.net/  for  lots  of  links 
and  news  on  what  we  believe  will  be  a 
huge  trend. 

A  word  of  caution:  If  you  use  one  of  these 
public  networks  makes  you  disable  all  of 
your  Windows  shares  and  run  something 
like  Zonealarm  (see  www.nwfusion.com, 
DocFinder:  6668).  If  you  can  see  the  net¬ 
work,  the  network  can  see  you,  and  you 
wouldn’t  want  just  anyone  messing  around 
with  your  files. 

Next  week ,  diagnostics  and  antennas  . . . 
connect  for  free  at  gearhead@gibbs.com. 


Cool  Tools 

A  roundup  of  the 
latest  neat  stuff 

Compiled  by 
Keith  Shaw 


HP  ships  Bluetooth  adapters,  printers 

You  may  finally  be  able  to  use  those 
Bluetooth  PC  cards  to  do  something 
besides  talk  to  another  computer.  Hewlett- 
Packard  has  announced  availability  of  its 
HP  Deskjet  995c,  an  integrated  Bluetooth 
printer  and  a  Bluetooth  printer  adapter  that 
gives  older  printers  Bluetooth  connectivity 
For  customers  without  Bluetooth,  HP 
announced  the  HP  wp  110,  a  802.11b  wire¬ 
less  print  server. 

The  Deskjet  995c  can  print  without 
cables  from  up  to  30  feet  away  from  other 
devices  with  Bluetooth  connectivity  It  can 
print  up  to  13  pages  per  minute  black  and 
white,  or  12  pages  per  minute  color  via  the 
iUietO'  >!h  connection  .The  printer  can  con¬ 


nect  with  wires  via  a  Universal  Serial 
Bus  interface  and  also  via  an 
infrared  interface.The  995c  costs 
about  $400  and  is  available  now. 

The  Bluetooth  printer  adapter 
supports  several  HP  LaserJet, 

Deskjet  and  PhotoSmart  print¬ 
ers  (check  www.hp.com  for  a 
full  list),  and  connects  to  the 
parallel  port  for  its  connectivity 
The  adapter  is  actually  a  third- 
party  product  from  MP1  Tech 
Data  and  is  distributed  by  HP 
The  adapter  costs  $129  and  is 
available  now. 

The  wpl  10  lets  you  connect  a 
printer  (via  parallel  port)  to 
areas  where  you  can’t  run 
cables,  and  provides  WiFi  (802. 
lib)  connectivity  to  those  printers. It  costs 
$300, and  will  be  available  next  month. 

3.2  megapixel  camera  for  $500 

Olympus  has  announced  the  C-3020 
Zoom  3.2  megapixel  camera,  a  digital  cam¬ 
era  that  will  cost  $500  and  will  be  available 
in  November.  The  camera’s  new  features 
include  a  noise-reduction  system,  which 
aims  to  give  cleaner  colors  and  sharper 
pictures.  When  activated,  the  system  auto¬ 
matically  compares  the  original  image 
with  an  image  taken  immediately  after  the 
first  exposure  with  no  light.  The  camera 
then  compares  the  images  and  cancels 
background  “noise”  in  the  original  to  create 
a  clearer  picture.The  camera  has  a  3X  opti¬ 
cal  zoom  lens,  with  a  continuous  2.5X  digi¬ 
tal  telephoto,  as  well  as  a  six-mode  flash 


with  red-eye  reduction  mode.  It  also  in¬ 
cludes  a  16M-byte  SmartMedia  card,  USB 
cable,  carrying  strap,  lens  cap,  four  AA  bat¬ 
teries,  Camedia  Software  Version  2.5  and 
remote  control.  More  information  is  avail¬ 
able  at  www.olympusamerica.com. 

Turn  your  Visor  into  a  massager 

If  you’ve  ever  wanted  to  get  a  massage 
while  checking  your  next  appointment, 
you’re  in  luck.  Raynet  Technologies  has 
launched  the  Raycom  Personal  Massager, a 
Springboard  module  that  converts  a  Hand¬ 
spring  Visor  into  a  massaging  device  while 
maintaining  other  operations.  The  snap-in 
module  lets  you  massage  muscles  while 
working,  reading  or  relaxing.  The  module 
works  through  two  gel  pads  that  you  attach 
to  your  body  It  comes  with  three  massage 


modes,  —  squeezing, 
chopping  and  tapping  — 
and  three  programs  for 
the  back,  shoulders,  arms 
and  legs.  The  device  also 
includes  software  so  you 
can  adjust  frequency,  mod¬ 
ulation,  burst,  pressure  and 
duration.  Future  free 
downloads  of  new  mas¬ 
sage  rfiodes  and  software 
will  be  available.  The 
device  has  more  than  three 
weeks  of  battery  life  under 
normal  usage.  It  costs 
$100  and  is  available  at 
www.raynet-tech.com. 

It's  module  madness! 

Handspring  wants  more  people  to  buy 
Springboard  modules.  As  an  incentive,  10 
developers  are  offering  a  20%  instant  re¬ 
bate  on  23  Springboard  modules  on  Palm- 
Gear  (www.palmgear.com/hs)  until  Nov.  6. 
The  developers  include  Arkon  (Arkon 
Parafone),  Card  Access  (ThinModem  and 
ThinModem  Plus),  Franklin  Electronics 
(reference  modules),  Hagiwara  (back-up 
and  Flash  modules), Infinity  Softworks  (cal¬ 
culators),  Innogear  (miniJam  MP3  player 
and  Innopak  2V  modules),  Karrier  Com¬ 
munications  (lntelligolf  module),  PalmTop 
(V-Rally),  Packet  Express  (entertainment 
pack,  recipes,  chess  and  dbNow  modules) 
and  Xircom  (wireless  Ethernet  module 
and  56K  bit/sec  modem  module). 

Send  cool  product  info  to  kshaw@nww.com. 


HP  Deskjet  995c 


The  lowest  TCO 
in  the  storage  industry? 

EMC,  FYI. 


We’re  doing  more  than  anyone  else  in  the  industry  to  lower  the 
Total  Cost  of  Ownership  of  storage  infrastructure. 


To  see  actual  case  studies  that  show  how  we’re  accomplishing 
that,  check  out  www.EMC.com/goodnews 
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EDITORIAL 

John  Dix 

Do  customers  a 
favor:  Squeeze 
images 

Those  of  us  in  high  tech  tend  to  forget  that  the 

Web  is  a  different  experience  for  the  average  Joe 
sitting  behind  a  56K  bit/sec  modem. The  only 
time  we  suffer  that  indignation  is  when  we’re  on  the 
road,  but  even  that  is  becoming  less  frequent  now  that 
hotels  are  adding  Ethernet  ports. 

The  bane  of  speed  for  most  commercial  Web  sites  is, 
of  course,  images.Those  big,  fat  JPEGs  and  GIFs  slow 
downloads  to  a  crawl.  While  DSL  and  cable  modems 
will  ultimately  let  the  masses  speed  through  your  site, 
broadband  penetration  is  still  woefully  low  —  10%  by 
some  calculations. 

I  ran  into  a  new  company  at  the  recent  Gartner  Sym¬ 
posium  in  Orlando  that  has  an  interesting  compression 
algorithm  that  may  help.Airzip  says  its  technology  can 
reduce  JPEGs  by  45%  and  GIFs  by  up  to  86%. 

The  heart  of  the  system  is  a  $5,000  software  compres¬ 
sion  engine  that  plugs  into  Microsoft’s  Internet  Infor¬ 
mation  Server  (versions  for  Apache,  IBM  Websphere 
and  BEA  Weblogic  will  be  available  early  next  year). 
Complementing  that  is  a  250K-byte  decompression 
client  users  download  for  free. 

Part  of  the  beauty  of  the  system  is  that  it  is  transpar¬ 
ent.  Web  content  is  stored  as  usual  and  when  an  Airzip 
client  calls  for  it,  the  images  are  converted  on  the  fly  to 
what  the  company  calls  AZV  and  hurried  along. 

As  an  example  of  how  this  might  help  companies, 
Director  of  Product  Marketing  Doug  Keiller  says  a  large 
grocer  retailer  in  Europe  is  considering  using  the  prod¬ 
uct  because  a  250K-byte  Web  page  that  takes  30  sec¬ 
onds  to  download  using  a  56K  bit/sec  modem  can  be 
squeezed  down  to  80K  bytes  and  delivered  in  10  sec¬ 
onds.  Twenty  seconds  doesn’t  sound  like  a  lot  to  save, 
but  when  a  customer  has  to  slog  through  multiple 
pages  to  shop,  it  adds  up  quickly. 

You  can  see  the  technology  at  work  by  checking  out  a 
demo  at  www.airzip.com/demo.The  demo  button  down¬ 
loads  the  client  and  then  lets  you  access  different  types 
of  images,  including  samples  of  X-rays, security  pictures 
(  fingerprints,  mug  shots  and  camera  images),  and  field 
force  automation  tools  such  as  maps  and  schematics. 

Keller  says  the  technology  will  be  particularly  com¬ 
pelling  where  the  client  doing  the  calling  is  a  hand¬ 
held  —  phone  or  PDA  —  on  the  other  end  of  a  slow 
wireless  link. 

To  g  >t  the  customer  experience,  get  off  that  fat  pipe 
..  .>rk  and  try  it  using  a  modem.  Impressive.  Anything 
mm  can  speed  image  delivery  has  to  be  viewed  as  a 

win  by  customers. 

—  John  Dix 
Editor  in  chief 
jdix@nww.com 
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Palm  reading 

In  the  “How  we  did  it”  story  to  your  Internet-enabled 
wireless  device  shootout  (www.nwfusion.com, 
DocFinder:  6554),  your  consultants  say  Palm-based 
wireless  devices  should  be  treated  as  variants  of  a 
Palm  VII. This  is  not  true. 

Earlier  this  year  I  replaced  my  Wireless  Application 
Protocol  (WAP)  phone  with  the  Kyocera 
Smartphone.  Nearly  all  of  my  phone  use  is  based  on 
Eudora  Web  browser  and  e-mail,  and  Avantgo,  none 
of  which  run  wirelessly  on  a  Palm  VII.  I  rarely  use  the 
Palm  VII  compatibility  features  because  they  are  so 
limited.  Prior  to  purchasing  the  Smartphone,  I  used 
the  OmniSky  service  for  a  year,  and  again  1  rarely 
used  Palm  Vll-based  features. 

Unlike  the  other  devices  in  the  survey,  the  Palm 
platform  offers  a  range  of  wireless  solutions.  It’s  a 
shame  that  your  consultants  chose  the  least  func¬ 
tional  of  them. 

Tim  Hunt 
Jersey  City  N.J. 

Editor's  reply:  We  chose  the  Palm  device  as  the  rep¬ 
resentative  of  the  Palm  OS  category  because  it  is  the 
de  facto  standard.  The  purpose  of  the  tests  was  to 
compare  categories  of  devices  —  WAP  phones  vs. 
Palm  OS  devices  —  and  not  individual  devices  with¬ 
in  a  category  (such  as  Kyocera  vs.  Palm  VII). 

We  also  created  an  interactive  Buyer's  Guide  that 
includes  data  on  far  more  devices  and  services  than 
we  could  include  in  our  tests.  Go  to  www.nwfu 
sion.com ,  DocFinder:  6555. 

What  it  takes 

In  the  story  “Five  technologies  with  legs”  (www.nw 
fusion.com,  DocFinder:  6556),  Eugene  Spafford  of 
Purdue  University  says,  “It’s  likely  to  take  outside 

E-mail  letters  to  jdix@nww.com  or  send  them  to  John  Dix.  editor  in 
chief.  Network  World,  1 18  Turnpike  Road,  Southborough,  MA  01 772. 
Please  include  phone  number  and  address  for  verification. 


pressure  from  government  or  something  along  the 
lines  of  a  consumer  boycott  before  industry  will 
spend  the  time  and  money  to  adequately  address 
the  issues  raised.” 

The  consumer  boycott  is  already  happening. 
Prices  are  falling  and  so  are  consumer  purchases. 
And  the  industry  can’t  figure  out  that  consumers 
are  full  to  the  gills  with  fighting  off  spam,  pages 
that  won’t  load  on  their  machines  because  of 
Flash  advertisements  and  the  constant  drumbeat 
of  virus  Trojan  worms  coming  to  eat  their 
machines. 

What  does  it  take  for  the  industry  to  catch  on? 

Jim  Pivonka 
La  Crosse,  Kan. 

Remote  support 

Regarding  Mark  Gibbs’  Backspin  column  “IT  will 
never  be  the  same  again”  (www.nwfusion.com,  Doc 
Finder:  6557): 

Restore  multiple  local  backups  from  a  remote  lo¬ 
cation?  Is  Gibbs  crazy?  Whoever  performed  the  local 
backup  can  perform  the  local  restore, and  a  policy 
that  lets  laptop  users  back  up  their  own  data  is 
lunacy  at  its  finest. 

Supporting  remote  users  is  just  as  easy  as  support¬ 
ing  local  users.  Gibbs  assumes  that  the  standardized 
tools  today’s  teleworkers  use  will  be  the  same  tools 
that  we  use  in  the  future  as  the  demand  increases, 
but  the  tools  will  change  to  support  any  type  of 
structure  that  is  deemed  necessary 

No,  I’m  afraid  that  we  won’t  be  overworked. We  will 
find  the  easiest  solution  and  use  as  many  shortcuts 
as  possible.  We  will  probably  have  an  easier  time 
supporting  massive  amounts  of  remote  users, 
because  they  won’t  take  the  time  to  phone  or  e-mail 
us  for  help  if  they  can  figure  out  the  solution  on  their 
own  in  5  minutes. 

Robert  Geach 
Atlanta 


More  online!  www.nwfusion.com  Find  out  what  readers  are  saying  about  these  and  other  topics.  DocFinder  6622 
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MANAGEMENT  MODE 

Jeff  Shapiro 


ncertainty  It’s  a  word  we  live  with 
every  day  in  this  business.  Market  con¬ 
ditions,  business  activity,  expansion, 
contraction,  mergers,  sell-offs  and  crises  all 
combine  to  make  IT  a  whirlpool  of  con¬ 
stantly  changing  parameters,  and  we ’re  ex¬ 
pected  to  recognize  and  support  those 
changes. Sometimes  we’re  even  the  agents  of  change  ourselves. 

The  events  preceding  Sept.  1 1 ,  the  horrific  acts  on  that  day  and  the 
unfolding  story  of  the  past  month  have  forever  changed  America. 
Now  everyone  everywhere  has  had  to  deal  with  uncertainty  as  part 
of  everyday  life.  In  90  days  we’ve  seen  not  one  but  two  stock  market 
crashes  and  recoveries,  a  massive  terrorist  attack  on  American  soil, 
and  a  culture  that  responded  by  knitting  together  in  a  way  not  seen 
since  World  War  II.  We’ve  learned  the  hard  way,  in  pocketbook  and  in 
mind,  that  we  are  not  invincible. 

Believe  it  or  not,  we  in  the  IT  community  are  the  role  models  now. 
During  the  protracted  stock  market  decline  most  of  us  had  hands-on 
practice  in  uncertainty  management,  slashing  and  realigning  bud¬ 
gets  to  match  the  new  market  reality  On  Sept.  11,  the  unthinkable 
became  all  too  real  as  hundreds  of  us  perished  that  day  and  thou¬ 
sands  more  were  called  to  the  hardest  service  they  will  ever  face: 
bringing  up  back-up  processing  centers,  knowing  that  the  people 
who  ran  the  main  ones  will  never  be  there  to  help  again. 


Role  models  for  uncertain  times 


We’ve  been  there  before,  though.  Floods,  hurricanes,  earthquakes 
and  man-made  disasters  have  brought  many  of  us  to  the  limits  of  our 
capabilities  and  endurance.  Our  skill  of  bringing  shape  back  to 
chaos  is  now  sorely  needed  in  our  jobs  and  communities.  Even  as 
our  great  nation  stands  up  to  battle  an  equally  great  evil, so  must  we 
stand  up  where  our  skills  are  needed,  because  here  is  the  defining 
line  between  managers  and  leaders. 

If  a  leader  sees  something  that  needs  doing,  he  or  she  does  it. They 
don’t  wait  for  someone  else  to  come  along,  because  that  someone 
else  isn’t  coming.  Most  people  don’t  have  the  training  to  see  the 
problem, and  the  ones  who  do  are  already  busy, so  now  it’s  your  turn. 
Just  as  in  the  office,  lead  by  example.  If  your  cause  is  just,  if  the  task 
is  necessary,  others  will  come  to  help.  And  don’t  fault  them  for  not 
being  there  first.  Leaders  need  followers,  who  provide  the  strength 
and  bulk  of  numbers  to  make  things  happen.  Don’t  give  in  to  anger; 
use  its  energy  to  fuel  your  volunteer  work  at  an  organization  that 
needs  your  mind  and  dedication  to  serve  those  who  serve  us. 

Finally,  there  are  those  among  us  who,  when  called,  quietly  put 
down  their  keyboards,  donned  a  uniform  and  went  to  serve  our 
country. To  those  people  I  say  “God  speed  and  God  bless,”  and  I  hear 
the  echo  of  thousands  behind  me. 


Our  skill  of  bring¬ 
ing  shape  back  to 
chaos  is  now 
sorely  needed  in 
our  jobs  and 
communities. 


Shapiro  is  a  writer  and  consultant  on  IT  management  organization 
and  best  practices.  He  can  be  reached  at  jshapiro@chartertn.net. 


YANKEE  INGENUITY 

Howard  Anderson 

Last  month  1  went  to  Puerto  Vallarta, 
Mexico  to  keynote  the  Telefonos  de 
Mexico  annual  users  meeting.  You 
know  the  drill  —  alleged  expert  in  all  things 
network  gets  up  in  front  of  senior  manage¬ 
ment  of  the  major  customers  and  demysti¬ 
fies  where  telecommunications  is  going  and 
how  smart  companies  are  building  new  businesses  based  on 
advanced  data  communications  and  kicking  the  crap  out  of  their 
competition.  This  group  was  small  but  potent,  representing  25%  of 
the  Mexican  GNP 

By  my  count  1  have  done  this  speaking  drill  about  150  times;  I  don’t 
think  there’s  a  user  group  in  the  communications  industry  1  haven’t 
addressed. The  trick:  Understand  what  issues  the  smartest  users  have, 
and  tell  company  management  what  they  must  do  to  keep  the  loyal¬ 
ty  of  their  most  important  customers.These  meetings  are  always  held 
in  some  golf  resort  where  management  can  “bond”  with  customers. 
At  one  meeting,  the  CEO  suggested  1  cut  my  insightful  presentation 
short  because, “We  are  here,  Howard,  to  play  golf  with  our  customers. 
If  our  technology  isn’t  too  bad,  we  will  do  $2  billion  with  this  group. 
Our  tee  times  start  at  noon;  I  know  you  will  be  done  by  then.” (It  was 
11:45  a.m.  when  he  passed  this  suggestion  to  me.)  On  the  other 
hand,  1  have  more  golf  shirts  with  company  logos  than  Tiger  Woods. 

There  is  always  a  hidden  agenda  at  these  user  meetings.  It’s  usually 
“How  good  it’s  going  to  be,”  with  statistics  citing  the  number  of 
homes  with  broadband  access,  the  growth  of  T-l,  and  examples  of 
how  the  best-run  companies  are  leveraging  network  technology. 
Outside  the  U.S.,  the  hidden  agenda  is  to  explain  what  the  best-run 
companies  such  as  Wal-Mart,  Citibank  or  eBay  are  doing,  and  why  the 
users’  companies  should  emulate  these  best  practices. 

But  I  quickly  realized  that  Telmex  wasn’t  behind  the  rest  of  the  in¬ 
dustry  —  it  was  in  front.  Furthermore,  the  company  looked  very  fam¬ 
iliar  to  me,  but  I  couldn’t  quite  figure  out  why. Then  I  realized  that  it 
was  just  like  a  company  I  used  to  know  well  —  AT&T  before  divesti¬ 
ture.  Telmex  was  once  government-owned  but  has  been  privatized 
for  the  past  10  years. Yes,  there  is  competition,  but  Telmex  has  97%  of 
the  local  market, 70%  of  the  long-distance  market, and  60%  of  all  calls 


A  tale  of  two  countries 


originating  from  Mexico. 

Sound  familiar?  All  the  cellular  companies,  ISPs  and  competitive 
long-distance  companies  pay  Telmex  to  complete  calls  over  its  net¬ 
works,  and  interconnect  traffic  is  growing  40%  to  45%  per  year.  Tel¬ 
mex  takes  25%  of  its  revenue  to  the  bottom  line;  its  margins  are  twice 
what  most  telecom  companies  earn.  Any  wonder  why  Bell  South  and 
SBC  lust  after  this  market?  Data  services  will  hit  $1  billion  this  year, 
but  I  expect  them  to  quadruple  by  2006. 

A  monopoly  is  a  beautiful  thing  to  behold  —  unless  you  are  a  cus¬ 
tomer  and  are  overpaying  and  getting  bad  service. 

Contrast  Telmex  to  AT&T.  I  recently  paid  my  semiannual  call  on 
Mike  Armstrong.  AT&T  has  a  long-distance  business  that  decreases 
each  year  and  looks  every  day  like  a  pure  commodity  one  with  more 
competitors  than  you  can  shake  a  stick  at;  a  cable  business  that  is  for 
sale;  absolutely  no  local  telephone  business;  and  stockholders  who 
have  gone  from  sullen  to  mutinous. 

In  the  U.S.,we  have  had  300  competitive  local  exchange  carriers 
funded,  now  starving  for  capital  with  a  nonexistent,  junk  bond  mar¬ 
ket.  We  have  overleveraged  balance  sheets  and  flawed  business 
models.  We  have  had  too  many  companies  with  excess  capacity 
pricing  their  services  below  cost,  which  destroys  the  margins  for  the 
incumbents. 

The  difference  between  us  and  Mexico?  We  believed  in  competi¬ 
tion  and  deregulation  —  good  for  the  consumer,  bad  for  the  incum¬ 
bent  carriers.  Mexico  never  really  believed  in  competition  and  de¬ 
regulation,  so  they  did  as  little  as  possible,  as  loudly  as  possible. 

So  Armstrong  loses  even  more  hair  and  has  to  get  up  two  hours  ear¬ 
lier  to  get  his  worrying  done.  Telmex’s  Carlos  Slim,  Latin  America’s 
richest  businessman,  aggressively  has  stayed  efforts  to  regulate  his 
company  more  tightly.  Mexico’s  telecom  market  is  growing  at  30%. 
Telmex  just  got  a  6.5%  tariff  increase  and  is  on  a  roll. 

Who  would  you  rather  be,  Carlos  Slim  or  Mike  Armstrong?  And  who 
do  you  think  sleeps  better  at  night? 

Anderson  is  senior  managing  director  of  Yankeetek  Ventures,  a 
Cambridge,  Mass.,  venture  incubator.  He  can  be  reached  at  hander 
son@yankeetek.  com. 


Who  would  you 
rather  be,  Carlos 
Slim  or  Mike 
Armstrong? 
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rom  the  start,  the  premise  was  simple:  to  deliv¬ 
er  hosted  applications  over  the  network  to 
customers.  Application  service  providers 
jumped  into  the  market  in  droves  to  cash  in 


on  what  was  expected  to  be  a  gold  mine.  During  the 
ASP  frenzy  of  1999,  Dataquest  predicted  ASP  revenue 
would  top  $22  billion  by  2003.  But  hitting  it  big  as  an 
ASP  wasn’t  so  easy. 

“Everybody  expected  this  to  be  instantly  adopted, 
that  customers  would  just  stop  dead  in  their  tracks  and 
say, ‘Wow!  This  is  what  I’ve  been  missing  all  my  life!’  — 
like  a  revolutionary  kind  of  thing,” says  Laurie  McCabe, 
vice  president  and  service  director  at  Summit 
Strategies.  “But  very  few  things  are  revolutionary  Most 
things  are  evolutionary.  And  what  we’re  seeing  is  the 
evolution  of  the  industry/’ 

Evolution  means  change,  and  in  the  ASP  market, 
change  means  consolidation.  Dozens  of  ASPs  are 
struggling  or  going  out  of  business.  Those  failures  — 
including  the  Intel  and  SAP  venture  Pandesic,  and 
more  recently,  ASP  pioneers  Breakaway  Solutions  and 
FutureLink  —  are  making  an  already  skittish  customer 
base  even  more  wary. 


However,  at  the  same  time,  hundreds  of  com¬ 
panies  are  happily  using  hosted  applications. 
And  although  the  ASP  market  hasn’t  come 
close  to  reaching  the  lofty  initial  projections, 
it’s  still  strong.  According  to  Gartner,  ASPs 
pulled  in  $2.1  billion  in  2000,  and  worldwide 
ASP  revenue  should  hit  $7.4  billion  by  2003. 

The  ASP  industry  is  experiencing  growing 
pains  common  to  any  emerging  technology 
as  IT  executives  slowly  warm  to  the  idea  of 
changing  the  way  they  do  business. The  differ¬ 
ence  is  that  instead  of  providing  a  tangible 
product,  ASPs  are  delivering  a  service  that  is 
somewhat  difficult  to  define.  Add  to  that  the 
inherent  complexities  of  remotely  delivering 
applications  designed  for  a  client-server  envi¬ 
ronment,  and  the  troubles  quickly  mount. 
Nevertheless,  the  notion  of  software  as  a  ser¬ 
vice  is  here  to  stay. The  question  is  which  ven¬ 
dors  will  figure  out  the  winning  way  to  deliver 
that  service. 


ASPs  emerged  during  the  dot-com  boom 
when  capital  was  easy  to  get  and  business 
plans  consisted  of  little  more  than  a  “build  it 
and  they  will  come”  philosophy.  But  demand 
didn't  take  off  quickly  enough,  and  many  ASPs 
were  stung  by  their  lack  of  focus. 

“Most  ASPs  tried  to  be  everything  to  every¬ 
body”  says  Lew  Hollerbach,  managing  director 
of  service  providers  at  Aberdeen  Group.  “You 
cannot  go  into  business  these  days  and  have 
the  sort  of  ‘throw  anything  against  the  wall 
and  see  if  it  sticks’  approach.  It  just  doesn’t 
work.You  have  to  have  focus.” 

For  example,  Pandesic  was  highly  touted 
because  of  its  founders  Intel  and  SAPbut 
when  Pandesic  couldn’t  make  the  transition 
from  delivering  e-commerce  applications  to 
dot-coms  to  servicing  larger  companies,  the 
venture  folded. 

Such  failures  have  scared  many  firms  away 
from  considering  ASPs.  But  IT  executives  who 
have  successfully  used  ASPs  advise  their  peers 
against  ruling  them  out. 

For  example,  National  Semiconductor  calls 
its  ASP  rollout  a  definite  success, says  Ulrich 
Seif,  CIO  for  the  Santa  Clara  manufacturer.  Last 
year,  National  Semiconductor  decided  to  shift 
its  IT  operations  and  thought  ASPs  could  save 
money  by  offering  scalability  and  reducing 
staffing  needs. 

“We  wanted  to  explore  if  the  ASP  model  was 
viable. To  really  test  the  model,  we  had  to  find 
out  if  we  could  put  a  key  application  like  our 
finances  on  an  ASP,”  Seif  says.That  worked 
OK,  and  Qwest  Cyber.Solutions  (QCS)  now 
hosts  National’s  10, 000-seat  SAP  human 
resources  package  and  a  SAP  financial  pack¬ 
age  that’s  accessed  by  about  500  users. 

Another  ASP  convert  recommends  doing 
your  due  diligence  to  pick  an  ASP  likely  to 
stay  afloat. 

“Go  into  it  with  your  eyes  open.  Evaluate  the 
worst-case  scenario.  Come  up  with  contin¬ 
gency  plans  arid  always  monitor  your  applica¬ 
tions,”  says  Rodiic  O’Connor,  vice  president  of 
technology  at  Putnam  Lovell  Securities  in  San 
Francisco. 

O’Connor  carefully  checked  the  financials  of 
the  ASPs  he  considered,  ensured  that  critical 
data  he  needed  was  synchronized  daily  into 
an  internal  database  in  case  the  vendor  went 
out  of  business,  set  up  redundant  network 
connections  between  his  four  offices  to  offset 
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any  infrastructure  problems  and  used 
VPNs  and  Secure  Sockets  Layer-encrypt¬ 
ed  Internet  connections  to  access  his 
applications.  He  uses  AppShop  for 
Oracle  Financials,  Salesforce.com  for 
customer  relationship  management, 
BlueMatrix  for  research  management 
and  Jamcracker  for  human 
resources  software  from 
Employease,  access  control 
from  iPass.and  online  col¬ 
laboration  tools  from  WebEx. 

“The  core  financial  argu¬ 
ments  [for  using  ASPs]  out¬ 
weigh  the  fear,”  O’Connor  says. 

Technical  difficulties 

You  can't  blame  potential 
ASP  users  for  being  cau¬ 
tious.  In  addition  to  some 
shaky  business  models,  ASPs 
were  facing  difficult  techni¬ 
cal  hurdles.There  were  last- 
mile  concerns,  concerns 
about  security  over  the 
Internet,  transaction  volumes 
over  the  Internet,  things  like 
middleware  to  write  and 
maintain  interfaces,"  says  Rob  Unger, 

CEO  of  Agilera.“It’s  not  as  easy  as  people 
might  have  thought  it  was  going  to  be. 
But  that’s  actually  where  the  value  to 
clients  comes  in,  because  in  effect  they’d 
have  to  manage  all  of  that  internally  if 
they  were  going  to  do  it  themselves.” 

So  while  early  ASPs  targeted  dot-coms 
and  small  businesses  that  required  little 
integration  and  customization, and 
accessed  their  applications  largely  via 
the  Internet,  maturing  vendors  struggled 
with  how  to  provide  the  same  service  to 
more  demanding  large  corporations. 

Corporations  were  worried  about 
security,  connectivity  and  integration, 
observers  say.  One  thing  that  troubled 
them  was  delivery  over  the  public  net¬ 
work,  says  Mark  Hoffman,  application 
systems  architect  at  Tufts  Health  Plan 
and  a  member  of  the  ASP  Industry 
Consortium’s  End  User  Council. 

“There’s  the  question  of  latency  involved 
with  the  Internet  cloud,  because  it’s  really 
kind  of  a  black  hole  when  it  comes  down 
to  it.  Even  with  a  VPN, you  can  have  a  dis¬ 
ruption  of  service;  your  service  providers 
router  could  fail,”  Hoffman  says. 

Even  today,  most  large  corporations 
connect  to  their  ASPs,  at  least  for  data 
transfer,  via  private  lines.  For  example, 
National  Semiconductor  is  located  close 
enough  to  a  QCS  data  center  that  it 
accesses  its  SAP  application  via  a  T-3, 
which  is  a  45-megabit  connection  that 
i  ts  them  right  on  the  LAN,” says  Klaus 
i1  i  .ss  director  of  infrastructure  for 
the  citipmaker. 
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p  •<  s  needed  didiver  bandwidth- 
•  a  • .  .'ise  applications. such  as 
I  pf  St  ft  i:  a  SA'Twith  high  levels  of 
pc-rfonnance.The  proliferation  of  metro- 
politsn-ar -a  Ethernet  will  only  increase 
the  quality  of  application  delivery. 


But  bandwidth  at  a  lower  cost  does  noth¬ 
ing  to  help  ASPs  deal  with  the  complexity 
of  delivering  applications  designed  for  a 
client-server  environment,  another  techni¬ 
cal  obstacle  ASPs  encountered. 

“They  were  forcing  a  square  peg  in  a 
round  hole,”  says  Summit  Strategies’  Mc- 
Cabe.“If  you  have  applica¬ 
tions  that  were  designed  to 
be  put  on  a  server  by  a  com¬ 
pany,  used  by  one  company, 
used  with  a  Windows  inter¬ 
face,  let’s  say,  the  things  you 
have  to  do  to  make  that 
work  as  a  Web-delivered  ser¬ 
vice  to  many  customers  is 
pretty  mind-boggling.” 

What’s  more,  big  compa¬ 
nies  didn’t  want  the  “vanilla” 
applications  ASPs  were  set  to 
offer,  preferring  customized 
software  that  could  be  inte¬ 
grated  with  their  internal  sys¬ 
tems.  While  ASPs  offer  some 
degree  of  customization  — 
QCS,  for  example,  has  pre¬ 
packaged,  industry-specific 
software  suites  —  few  are 
willing  to  spend  the  time  and  money  it 
takes  to  offer  high  levels  of  customiza¬ 
tion.  One  exception  is  Corio,  which  now 
hosts  Hitachi  America’s  highly  custom¬ 
ized  SAP  R/3  software. 

Another  approach  to  customization  is  to 
choose  an  ASP  that  focuses  on  a  vertical 
market.  Larry  Hancock,  CEO  of  Altius,  a 
health  maintenance  organization  in  Utah, 
was  faced  with  upgrading  his  online 
claims  and  benefits  software  from  Quality 
Care  Solutions.  He  also  had  to  meet  strin¬ 
gent  security  guidelines  set  by  the  Health 
Insurance  Portability  and  Accountability 
Act  —  all  with  an  IT  staff  of  12. 

By  turning  to  healthcare,  industry- 
focused  ASP  Trizetto,  Hancock  says  he 
can  continue  to  run  applications  cus¬ 
tomized  to  his  needs  and  provide  high- 
quality  service  to  his  1 15,000  members, 
without  worrying  about  internal  IT. 

“Somebody  like  us,  we  just  can't  keep 
up  on  it,”  he  says.“When  you  have  some¬ 
body  like  Trizetto  that  has  the  resources 
and  is  big  enough  to  keep  up  on  it,  then 
there  is  a  lot  more  value  there  than  just 
some  somebody  hosting  the  application 
for  you.” 

Delivering  the  data 

Assembling  the  infrastructure  necessary 
to  deliver  hosted  applications  isn’t  inex¬ 
pensive.  Most  ASPs  have  found  it  difficult 
to  establish  the  customer  base  and  re¬ 
curring  revenue  they  need  to  offset  debt. 

Market  research  firm  1DC  released  a 
return-on-investment  study  earlier  this 
month  showing  that  ASP  usage  provides 
a  more  than  400%  return  on  investment 
over  five  years.  Analyst  Amy  Mizoras 
says, “One  of  the  things  we’re  investigat¬ 
ing  is  are  the  customers  getting  a  [return 
on  investment]  at  the  expense  of  the 
ASP’s  own  [return  on  investment]?” 

Take  USinternetworking.for  example. 
One  of  the  first  ASPs  when  it  launched 
in  1998,  USi  decided  it  needed  to  build 


its  own  data  centers  to  offer  the  com¬ 
plete  service  it  figured  larger  companies 
would  demand.  USi  invested  millions  of 
dollars  in  its  buildout,  but  customers 
were  slow  in  coming. 

USi  instituted  layoffs  and  decided  not 
to  build  out  any  more  data  centers. 
Earlier  this  month,  Bain  Capital  pro¬ 
mised  the  ASP  a  $100  million  equity 
investment  that  should  carry  USi  to  prof¬ 
itability  Still,  USi  executives  say  their 
decision  to  build  their  own  data  centers 
was  the  right  one. 

“Some  people  have  suggested  that  you 
can  provision  an  NT  or  Windows  2000 
box,  or  a  Unix  box,  with  an  Oracle  data¬ 
base  or  a  SQL  database.  Stick  a  router  in 
front  of  it  with  a  firewall  behind  it,  build 
some  bricks  and  some  concrete  and 
stick  a  cage  in  there,  and  you  have  all 
you  really  need  to  be  an  ASP  in  terms  of 
the  application  stack,”  says  Matt  Howard, 
USi  vice  president  of  business  develop¬ 
ment. “That’s  not  true  at  all.” 

What’s  needed  is  tight  integration  be¬ 
tween  the  application  and  all  layers  of 
the  infrastructure  —  from  servers,  to  net¬ 
work  operating  systems,  to  databases,  to 
networks,  he  says.“It  all  starts  with  ser¬ 
vice.  And  to  be  in  the  service  business 
you  need  to  understand  the  total  stack." 

Infrastructure  is  something  network 
executives  need  to  take  into  account 
when  considering  ASPs.  If  your  internal 
network  isn’t  suitable  for  handling  ASP- 
delivered  applications,  you  may  face  big 
headaches  such  as  systems  integration 
and  the  need  to  install  client  software 
on  each  desktop. 

“You  need  to  make  [the  ASP]  a  strate¬ 
gic  initiative,”  says  National  Semicon¬ 
ductor’s  Seif. “You’ve  also  got  to  have  the 
right  infrastructure  behind  it.” 

National  uses  a  portal  to  deliver  all  of 
the  applications  accessed  by  its  em¬ 
ployees,  customers  and  partners,  elimi¬ 
nating  the  need  to  install  clients  on 
individual  computers.  That  made  mov¬ 
ing  to  QCS  easy. “When  we  moved  to  the 


ASP  we  only  had  to  change  one  IP 
address,”  Seif  says. 

Software  as  a  service 

Vendors  such  as  Microsoft,  Sun  and 
IBM  are  developing  Web  services  that 
will  let  applications  communicate  with 
each  other  using  XML-based  languages. 
And  PeopleSoft  8  and  Siebel  7,  for  exam¬ 
ple,  are  designed  to  be  delivered  online. 

What  does  this  mean  for  pureplay 
ASPs?  They’ll  have  to  find  the  niche 
where  they  can  not  only  deliver  applica¬ 
tions  but  also  add  value,  observers  say. 
Those  that  don’t  are  ripe  for  acquisition 
by  telecom  companies  or  large  consul¬ 
tancies  with  the  deep  pockets  to  fund 
the  top  heavy  business  model. 

“When  we  look,  say,  five  years  from  now, 
the  early  ASPs  will  probably  look  as  differ¬ 
ent  from  the  software  as  service  providers 
as  Cro-Magnon  did  from  humans,”  says 
Summit’s  McCabe.“It’s  got  to  change  and 
adapt  before  it  reaches  its  ideal  state.” 

One  thing  analysts  expect  are  more  so- 
called  Internet  business  service  pro¬ 
viders,  such  as  Salesforce.com,  Upshot, 
Portera  and  Blue  Matrix,  which  write 
their  own  Web  native  applications  to  be 
delivered  via  the  Internet  on  a  monthly 
subscription  basis. 

There  is  no  question  the  ASP  market 
will  thrive,  observers  say.  But  you  proba¬ 
bly  won’t  know  the  players  as  ASPs. 
Software  as  a  service,  it  seems,  is  what 
we’ll  call  the  next  big  thing. 

“The  word  ASP  will  have  to  be  retired.  It’s 
too  damaged  a  name. To  relaunch  the 
word  ASRwould  be  tantamount  to  re¬ 
launching  ValuJet,”says  Tom  DePasquale, 
CEO  of  Outtask,a  firm  that  hosts  business 
applications  such  as  human  resource 
management,  CRM  and  sales  force  auto- 
mation.“Software  as  a  service  is  the  entire 
model  of  the  Microsoft  .Net  effort.  It’s  very 
much  the  focus  of  Oracle.  It’s  the  focus  of 
the  leading  software  companies  of  the 
world.  It’s  easy  to  argue  the  days  of  ship¬ 
ping  CDs  are  over.”B 


Gone  but  not  forgotten 

[  any  ASPs  lacked  the  business  plans  or  financial 
backing  to  survive  in  the  market.  Here  are  some 
I  of  the  best-known  failures: 

Agillion:  CRM.  Launched  1998;  closed  March  2001. 


Breakaway  Solutions;  E-business  applications,  creative  professional  services, 

Web  integration.  Launched  1992;  filed  for  Chapter  11  in  September  2001. 

FutureLink:  ERP  and  CRM.  Launched  1995;  filed  for  Chapter  11  in  August  2001. 

HotOffice.com:  Calendaring,  collaboration,  office  services.  Launched  1995;  closed 
December  2000;  assets  acquired  by  Thruport  Technologies  in  September  2001. 

Pandesic:  E-commerce.  Launched  1997;  closed  July  2000  and  finally  stopped 
serving  customers  in  February  2001. 

Red  Gorilla;  ime-and  expense-tracking,  calendaring.  Launched  1999; 

closed  Oct.  2000. 
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THE  STRAIGHT  GOODS  ON  RESTRICTED  PROMOTIONS. 


Oracle  has  issued  a  bold  offer.  They'll 
give  a  million  dollars  to  any  DB2, 
WebLogic  or  SQL  Server  user  who 
switches  to  Oracle  technology  and 
fails  to  triple  the  performance  of 
their  website.  Pretty  impressive  talk. 


Some  say  Oracle  is  putting  their 
money  where  their  mouth  is.  But 
for  Sybase  users,  it’s 
pure  silence. 


For  that,  we  apologize. 
But  we  wonder.  Why 
are  Sybase  users 
exempt  from  this 
extraordinary  piece 
of  generosity? 


To  begin  with,  our 
tests  show  that  Sybase 
Enterprise  Application 
Server  (EAServer) 
is  right  there  with 
Oracle,  performing  as 
fast  and  sometimes 
faster  than  some  of 
our  competition. 


EAServer  4.0  has 
what  it  takes  to 
manage  millions  of 
transactions  a  day 
and  the  scalability 
to  reliably  support 
thousands  upon 
thousands  of 
concurrent  users. 


Big  deal,  you  say. 

That’s  the  cost  of  entry  for  an  app 
server.  We  think  not. 


The  real  cost  of  entry  is  what  happens 
when  your  app  server  enters  your 
environment. 


Will  your  app  server  leverage  your 
existing  investments?  Or  will  it 
strangle  your  IT  department  for  a 


couple  of  months  in  a  slow  and  very 
painful  integration  process? 


with  any  back-end  database  using 
JDBC  or  ODBC  databases. 


In  reality,  that’s  where  all  the  really 
substantial  costs  are  hidden. 


Just  run  those  specs  up  against  the 
competitors. 


And  last  but  not  least, 
EAServer  provides  you 
with  a  wicked  fast  and 
intuitive  development 
environment  that  will 
amaze  your  friends  and 
delight  your  superiors 
as  you  get  your  stuff 
out  to  the  market  really, 
really  fast. 


So  there  you  have  it. 

We  think  perhaps  now 
you  have  a  much  better 
understanding  of  why 
all  Sybase  users  were 
excluded  from  the  very 
famous  Oracle  lottery. 


Indeed,  we’re  sorry  our 
technology  does  make 
you  ineligible  for  those 
Oracle  millions.  But 
look  on  the  bright  side: 
With  EAServer,  you 
can  help  your  business 
earn  some  millions  of 
its  very  own. 


server  available  on  the  planet.  It’s 
J2EE  certified.  It  supports  C,  C++, 
CORBA,  COM  and 
PowerBuilder,  as  well 
as  virtually  every 
switch,  server  and 
legacy  system 
known  to  IT.  It 
also  allows  for 
complete  integration 


For  more  information  on  how  you 
can  get  a  great  application  server, 
if  not  a  million  bucks,  visit 
www.sybase.com/customers 
or  call  1-800-8-SYBASE. 

I  Sybase 

Information  Anywhere' 
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And  it’s  here  where  EAServer  really 
leaves  the  competition  whimpering. 
EAServer  is  the  most  open  application 


Naturally,  it  also  has  enterprise-class 
security.  The  kind  of  security  you  can 
bet  a  couple  of  million  credit  card 
numbers  on. 


SYBASE  e-BUSINESS  SOFTWARE. 
BECAUSE  EVERYTHING  WORKS  BETTER  WHEN 
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Videoconferencing 


BY  CHRISTINE  PEREY, 
NETWORK  WORLD 
GLOBAL  TEST  ALLIANCE 


Pick  the  right  client  device,  figure  out  LAN 
bandwidth  requirements,  nail  down  WAN 
links,  then  start  conferencing. 


your  company’s  travel  budget  has  been  slashed  or  if  the  recent 
terrorist  attacks  have  made  employees  reluctant  to  fly,  you  may 
be  considering  videoconferencing  as  an  alternative  to  face-to- 
face  meetings. 


Before  you  jump  in,  here’s  a  comprehensive  guide  to 
enterprise-level  videoconferencing  that  covers  every¬ 
thing  from  bandwidth  requirements  to  equipment 
options  to  deployment  costs. 

Client  devices 

Currently  there  are  three  distinct  categories  of  clients 
defined  primarily  by  usage. 

•  Desktop:  Desktop  videoconferencing  clients  are 


assigned  to  a  single  user.  They  cost  between  $600  and 
$3,000  for  a  hardware-based  system  and  up  to  $150  for 
a  software-only  client.  Connectivity  is  over  IP 

•  Small  group:  Either  an  appliance  that  costs  between 
$3,000  and  $12,000  or  a  PC-based  system  that  costs 
between  $6,000  and  $14,000.  Small-group  videoconfer¬ 
encing  systems  are  relatively  easy  to  configure  and  use. 
They  run  over  ISDN  or  IP 

•  Large  group/boardroom:  Provide  the  highest-quality 


video,  but  also  come  with  the  highest  price  tag,  with  sys¬ 
tems  starting  at  $10, 000. They  also  run  over  ISDN  or  IP 

LAN  speeds 

Videoconferencing  can  leverage  the  existing  public  tele 
phone  network,  a  private  IP  network  or  the  Internet. The 
target  bandwidth  for  interactive  video  communications  is 
in  the  300K  to  400K  bit/sec  per  stream  range. This  in¬ 
cludes  audio  and  video  as  well  as  control  signaling. 

The  H.323  protocol  does  not  require  that  two  or  more 
endpoints  in  a  session  send  the  same  data  rate  they  re 
ceive.A  low-powered  endpoint  may  only  be  able  to  en¬ 
code  at  a  rate  of  100K  bit/sec,  but,  because  decoding  is 
less  processor-intensive,  it  could  decode  a  300K  bit/sec 
videostream. 

Nevertheless,  in  videoconferencing,  bandwidth  is 


Three  types  of  c 

Category 

:lient  devices 

Desktop 

Small  group 

Board/iarge  group 

Subcategory 

Hardware  accelerated 

Software  only 

Appliance 

PC-based 

Network  connectivity 

IP 

IP 

IP  or  ISDN 

IP  or  ISDN 

IP  or  ISDN 

Costs 

$600- $3, 000 

Free  to  $150 

$3,000-$12,000 

$6,000-$14,000 

$10,000  and  up 

Manufacturer 

— 

Pros 

i 

Cons 

Polycom,  Vcon.Tandberg 

FVC,  Microsoft,  EYEball, 
FocusFocus,  RealityFusion 

Polycom, Tandberg,Vcon,  Sony 

Polycom,  Vcon 

Polycom,  Vcon, 

Sony,  FVC 

Personal  system  assigned  to 
one  user;  well-integrated  with 
data  conferencing 
applications. 

Same  benefits  as  hardware 
single-user  device,  but  less 
expensive  than  hardware. 

Easiest  to  configure  and  use; 
shared  resource  in  meeting 
room;  can  be  effective  for 
presentations;  frequently 
includes  built-in  MCU. 

Maximum  strength  data- 
collaboration  environment; 

flexible  for  other  uses  when 

not  in  videoconference. 

Quality  closest  to 
“being  there" 
experience. 

Viewing  area  may  be  limited; 
minimal  control  of  environ¬ 
mental  conditions  (especially 
lighting);  individual  support  may 
be  costly;  does  not  exceed  512K 
bit/sec  data  rate. 

Same  as  for  hardware  only; 
lowest  audio  and  video  quality 
(data  rate  a  function  of  PC). 

Limitations  to  data 
conferencing;  isn't  used  for 
anything  else  when  not  in 
videoconference. 

Easily  tampered  with; 
potentially  difficult  to  set  up; 
slightly  higher  cost  for 
presentation  functionality. 

Highest  cost;  low 
flexibility. 
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Table  2:  Bandwidth  requirements 


Base  stream 

384K  bit/sec 

5 12K  bit/sec 

1M  bit/sec 

One,  two-party  session 

384K  bit/sec 

512K  bit/sec 

1M  bit/sec 

Two,  two-party  sessions 

768K  bit/sec 

1024K  bit/sec 

2M  bit/sec 

Three,  two-party  sessions 

1152K  bit/sec 

1536K  bit/sec 

3M  bit/sec 

Four,  two-party  sessions 

1546K  bit/sec 

2048K  bit/sec 

4M  bit/sec 

assumed  to  be  symmet¬ 
rical.  In  full-duplex  net¬ 
works  such  as  ISDN, 

Ethernet,  ATM  and  time 
division  multiplexed 
networks,  capacity  is 
expressed  as  bandwidth 
in  one  direction,  though 
equal  bandwidth  is 
available  for  traffic  in 
the  opposite  direction. 

You  need  to  estimate  the  number  of 
simultaneous  sessions  your  network 
needs  to  support,  and  figure  out  if  your 
network  has  bandwidth  end-to-end. 

AT-1  offers  1.5M  bit/sec  in  each  direc¬ 
tion  and  would  be  ample  bandwidth  for 
two  512K  bit/sec  or  three  384K  bit/sec 
videoconferences,  depending  on  the 
amount  of  simultaneous  traffic  on  the 
network.  Also,  make  sure  that  you  have 
10/100  switched  Ethernet  throughout  the 
LAN  segments  where  videoconferencing 
traffic  is  expected. 

Multipoint  conference  bandwidth  (with 
which  three  or  more  locations  can  see 
and  hear  one  another)  is  calculated  sepa¬ 
rately  from  point-to-point  sessions.  Multi¬ 
point  can  be  conducted  in  either  IP  or 
ISDN  environments,  and  some  conferenc¬ 
ing  units  will  support  both  network  types. 

Multipoint  conferencing  products  may 
be  software-based  or  accelerated  with 
special  hardware,  and  their  configuration 
can  produce  different  bandwidth  con¬ 
sumption  patterns  as  well  as  different 
user  experiences.  For  example,  when  an 
endpoint  is  used  to  host  a  multipoint 
conference,  the  maximum  bandwidth  for 
any  single  participant  is  the  bandwidth 
allocated  to  that  host  divided  by  the 
number  of  locations  participating.  When 
you  need  to  have  more  than  four  loca¬ 
tions  on  a  call  at  the  same  time,  network- 
based  products  are  recommended. 

If  you  decide  that  your  IP  network  can’t 
handle  the  additional  traffic  associated 
with  live  video  sessions  in  a  merged  or 
converged  network  deployment, your 
options  are  to  rely  on  circuit  switched 
networks  or  to  deploy  additional  IP 
bandwidth  capacity. 

The  WAN  connection 

Approximately  80%  of  the  group  video- 
conferencing  units  installed  today  inter¬ 
face  directly  with  ISDN.  Less  than  5%  use 
ATM,  and  the  remainder  are  on  an  IP  net. 

ISDN  is  recommended  when: 

•  You  are  planning  to  connect  with  peo¬ 
ple  in  locations  outside  your  company 

•  The  locations  are  in  Europe,  where 
ISDN  is  easily  available  and  broadband 
IP  remains  at  least  50%  more  expensive 
than  in  the  U.S. 

•  Your  IP  network  capacity  is  lacking 
and  you  do  not  expect  to  place  out¬ 
bound  calls  more  than  two  or  three 
hours  per  month. 

If  you  use  ISDN  for  transport  and  you 
want  to  add  centralized  user  administra¬ 
tion  or  system  management,  you  can  still 
install  an  Ethernet  connection  to  each 
device  and  a  management  software  pack¬ 
age  such  as  Fblycom’s  Global  Manage¬ 


ment  System  orVcon’s  MXM  on  a  server 
in  the  company’s  data  center. 

The  limitations  of  ISDN  (Basic  Rate 
Interface  or  Primary  Rate  Interface) 
include: 

•  Availability  not  widespread  in  the  U.S. 

•  Difficulty  configuring  and  managing 
once  ordered. 

•  Subject  to  service  interruptions  (sin¬ 
gle  point  of  failure). 

•  It  has  distance-driven  and  metered 
costs  (long-distance). 

•  The  infrastructure  supports  only 
one  telephony-like  service:  multipoint 
conferencing. 

Video  calls  on  ISDN  cannot  be  put  on 
hold,  cannot  be  forwarded  (when  no  one 
answers,  when  the  line  is  in  use  or  for  any 
other  reason), and  there  has  never  been 
a  “video  mail  box”  on  ISDN.  Recording 
one  side  of  an  ISDN  videoconference  is 
possible  using  an  analog  VCR  provided 
the  appropriate  interfaces  exist  on  the 
local  client  system. 

The  IP  option 

Using  proprietary  technologies  or 
H.323  standard-compliant  endpoints,  an 
IP  network  designed  only  for  data  can  be 
modified  to  support  business-quality 
videoconferencing  services. 

Where  bandwidth  is  available,  the  IT 


manager  would  need  to  add  and  adjust  a 
few  components  to  provide  a  complete 
solution,  or  outsource  the  management 
to  a  third  party  such  as  WireOne’s 
GlowPoint  service  or  Sprint’s  IP  video- 
conferencing  services. 

If  the  deployment  is  expected  to  have 
more  than  five  or  six  systems,  a  centralized 
user  and  network  administration  console 
such  as  Polycom’s  Global  Management 
System,  RADVision’s  H.323  gatekeeper  or 
Vcon’s  MXM  is  recommended. 

Some  companies  are  going  a  step  fur¬ 
ther  and  designing  an  enterprise  confer¬ 
encing  portal  using  technologies  such  as 
FVC’s  Click-to-Meet.  While  these  packages 
differ  in  their  features  and  functions,  they 
are  designed  to  perform  address  book 


management  (an 
important  issue 
when  clients  are  set 
up  behind  a  firewall 
and  use  network 
address  translation), 
set  performance 
metrics  on  a  per- 
device  or  user  basis, 
and  can  even  reduce 
the  risk  of  applica¬ 
tion  data  traffic  degradation  due  to 
excessive  bandwidth  consumption. 

QoS  questions 

Implementing  quality  of  service  (QoS) 
in  a  LAN  helps  to  protect  the  integrity  of 
service-sensitive  applications  without  fork¬ 
lift  upgrades.  Most  of  the  leading  network 
equipment  vendors  already  support  com¬ 
mon  QoS  standards,  such  as  RSVP;  they 
only  need  to  be  enabled  by  the  network 
administrator. 

You  should  also  find  out  what  your  back¬ 
bone  provider  uses  for  its  QoS.  If  the  proto¬ 
col  or  scheme  chosen  for  QoS  in  the  local 
loop  is  not  the  same  as  that  implemented 
in  the  backbone,  the  enterprise  network 
needs  to  put  QoS  translation  software  in 
place  for  QoS  requests  to  operate  end-to- 
end  during  a  videoconference. 

Even  when  QoS  protocols  are  in  place, 
you  may  need  additional  network  tuning 
to  ensure  that  the  video  applications 
don’t  crowd  out  data  applications. To 
avoid  this,  network  managers  should  seg¬ 
ment  and  manage  bandwidth  on  each 
switch  and  router  to  limit  the  total, 
prioritized  video  traffic. 

After  provisioning  appropriate  band¬ 
width  and  QoS,  other  challenges  remain. 
One  of  the  biggest  obstacles  is  getting 
real-time  video  traffic  through  firewalls. 


Since  H.323-compliant  applications  use 
dynamically  allocated  sockets  for  audio, 
video  and  data  channels,  a  firewall  must 
be  able  to  allow  H.323  traffic  through  on 
an  intelligent  basis. The  firewall  must  be 
either  H.323-enabled  with  an  H.323 
proxy,  or  able  to  “snoop”  on  the  control 
channel  to  determine  which  dynamic 
sockets  are  in  use  for  H.323  sessions,  and 
to  allow  traffic  through  only  as  long  as 
the  control  channel  is  active. 

Merging  and  emerging  services 

Since  the  very  essence  of  videoconfer¬ 
encing  is  communications  and  most 
legacy  systems  are  not  on  IP  networks, 
the  user  is  likely  to  encounter  a  situation 
where  protocols  need  translation  across 


different  networks. When  a  videoconfer¬ 
ence  needs  to  span  both  the  ISDN  and  IP 
infrastructures,  gateways  are  necessary. 

RADVision  is  the  leading  manufacturer 
of  videoconferencing  gateways  and  offers 
a  variety  of  form  factors  and  densities  to 
meet  diverse  network  requirements. 

Some  companies  have  to  share  limited 
resources  and  want  a  reservation  system 
to  permit  room  or  multipoint  control  unit 
(MCU)  scheduling. 

Endpoint  and  MCU  vendors  offer  some 
scheduling  tools  that  may  meet  your 
company’s  needs.Third-party  products, 
such  as  Collaborative  Systems’  Orchestra, 
MagicSoft’s  VC  Wizard  and  Global 
Scheduling  Solutions’ Global  Schedule, 
have  unique  features. 

When  the  videoconferencing  basics 
are  in  place  for  group  conferencing,  you 
might  consider  a  number  of  optimiza¬ 
tions.  For  example,  by  enabling  IP  multi¬ 
cast  and  using  intelligent  clients,  a  net¬ 
work  can  efficiently  support  multiway 
meetings  without  adding  an  MCU. 

If  using  IP  multicasting  to  achieve  a 
multipoint  scenario,  each  client  sends 
only  one  stream  of  packets  to  an  IP  mul¬ 
ticast  group  and  all  participating  ma¬ 
chines  receive  the  packets.  In  this  sce¬ 
nario,  bandwidth  consumption  is  lower 
than  when  an  endpoint  or  MCU  sends 
out  copies  of  the  same  packet  to  each  of 
the  receivers. 

Another  second-generation  feature 
found  in  products  such  as  Polycom’s 
ViewStation  FX  is  integration  of  video- 
conferencing  with  streaming  media  sys¬ 
tems,  enabling  the  broadcast  of  a  video- 
conference  from  a  coder/decoder  to 
many  remote  viewers  via  a  streaming 
media  server  or  to  archive  a  videoconfer¬ 
ence  on  a  streaming  media  server  for 


later  review. 

Although  an  exception  to  the  rule  today 
large  financial  services  companies  that 
have  integrated  videoconferencing  into 
their  corporate  cultures  are  beginning  to 
deploy  desktop  videoconferencing  capa¬ 
bilities.  With  Universal  Serial  Bus  inter¬ 
faces,  setting  up  a  videocamera  takes  only 
a  few  minutes,  in  contrast  with  earlier 
desktop  products  that  required  opening 
the  PC  and  installing  a  card.  Low-cost 
Webcams  put  all  the  computational  load 
from  compressing  video  and  audio  on  the 
host  computer.  Optional  hardware-acceler¬ 
ated  cameras  designed  specifically  for 
videoconferencing, such  as  the  Polycom 
Via  Video  orVcon  Vigo,  produce  the  best 
results. 


Network  components  for  videoconferencing 


Category 

Stand-alone  multipoint 
conferencing  unit 

Gateways 

Management  software 

Subcategory 

Hardware 

accelerated 

Software 

only 

IPPBX 

Gatekeeper 

User/network 

Network  connectivity 

IP  or  ISDN 

IP 

IP  to  ISDN 

IP  to  ATM 

IP  or  ISDN 

IP 

IP  or  ISDN 

Costs 

$500-$800 

Free  to  $150 

$3,000  and  up 

$6,000  and  up 

Manufacturer 

Polycom,  Avaya, 
RADVision 

FVC.Vcon, 

Ezenia 

RADVision, 

Polycom 

FVC 

Cisco, 

Vcon 

RADVision, 

FVC.Vcon 

Polycom, 

Forgent 
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How  much  does  it  cost? 

Depending  on  the  number  of  endpoints, 
the  type  of  client  and  choice  of  networks, 
videoconferencing  can  cost  as  little  as  the 
price  of  a  Webcam  ($100)  per  seat  to 
more  than  $15,000  per  conference  room. 

To  budget  a  videoconferencing  deploy¬ 
ment,  break  down  the  fixed  acquisition 
costs  from  the  recurring  and  usage-based 


costs.The  exact  fixed  costs  are  going  to 
depend  on  the  number  of  systems  and  the 
features  your  users  need.  In  general, sys¬ 
tems  provisioned  for  ISDN  will  also  sup¬ 
port  IRbut  IP-only  systems  tend  to  cost 
several  hundred  dollars  to  $  1 ,000  less  than 
ISDN  systems  because  they  have  fewer 
components.  Management  software  is  sold 
according  to  site  licenses  from  $250  per 


Access  Device  That 
Does  More  Than  Link. 

It  Collects  Statistics, 
Monitors  Usage 
&  Snitches  On 
Your  WAN . 
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Verilink  WAN  suite®  access  devices. 

Full  connection  statistics  and  reporting  from  anywhere,  anytime. 


Most  access  devices  do  little  more  than  tell  you 
the  link  is  up.  WANsuite  devices  from  Verilink 
tell  all.  They  give  you  powerful  reporting 
capabilities,  both  historical  and  real-time,  and 
display  the  infonnation  graphically  in  a  web 
browser.  So  you  can  monitor  and  enforce  SLAs. 
Isolate  network  performance  issues.  Do  trend 
cal  rsis.  And  proactively  engineer  your  network 
optimize  and  maximize  performance. 

.  :  •  uue  devices  support  any  combination  of 

s  i  icnmial  T1  Tl,  El  and  DSL,  for  private- 
i  .  eke '-based  networks.  Surprisingly, 
i  .  c.j  to  products  with  similar  connectivity, 
0  .  -  uch  less.  And  deliver  far  more. 


So  don’t  just  settle  for  knowing  your  WAN  is 
up.  Know  what’s  up  with  your  WAN.  For  more 
information  —  including  an  independent 
evaluation  of  access  devices  —  visit  us  at 

www.verilink.com 
or  call  1-866-665-1515. 
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license  to  $40,000  or  more  for  unlimited 
licenses.  Complete  enterprise  conferenc¬ 
ing  portal  environments  suitable  for  large 
companies  can  exceed  $100,000  per  in¬ 
stallation,  depending  on  hardware  and 
software  components. 

Another  factor  is  the  cost  of  installing 
the  last  mile.  Basic  Rate  ISDN  installation 
runs  about  $225  in  most  regions  of  the 
SBC  territory  while  other  regions  tend  to 
be  higher. The  cost  of  installing  a  T-l  de¬ 
pends  on  the  distance  between  your  facil¬ 
ity  and  the  nearest  central  office. 

Recurring  costs  are  composed  of  the 
monthly  cost  of  network  access,  network 
usage  costs  and,  potentially,  the  salary  for 
one  or  more  technicians  managing  net¬ 
work  provisioning,  installations,  room  or 
conferencing  system  reservations,  techni¬ 
cal  support  and  user  training.The  largest 
variable  in  this  equation  is  the  network 
usage  costs. 

ISDN  usage  charges  vary  but  can  be 
estimated  for  individual  customers  (one 
site)  at  5  cents  per  minute  per  B  chan¬ 
nel.  A  384K  bit/sec  videoconference  will 
consume  6  B  channels  at  a  cost  of 
approximately  30  cents  per  minute,  or 
$18  per  hour.  Companies  that  negotiate 
their  telecommunications  rates  with  car¬ 
riers  for  voice  and  video  usually  receive 
discounts  on  this  rate. 

ISPs  also  charge  for  capacity,  though 
not  by  the  minute. To  calculate  the  costs 
of  IP  backbone  services,  multiply  the 
data  rate  by  the  time.  A  384K  bit/sec  call 
for  one  hour  will  generate  nearly  1.4G 
bits  of  bandwidth.  On  a  VPN  the  network 
usage  costs  are  already  fixed  and  the 
company  will  incur  no  additional 
charges. 

Going  with  a  managed  service  provider 
can  be  cost-effective  for  some  regions  and 
some  companies.  GlowFbint’s  Web  site 
offers  a  calculator, and  users  can  plug  in 
the  number  of  hours  of  usage  per  location 
and  the  average  cost  of  ISDN  service  to 
obtain  a  cost  estimate. 

The  costs  of  deploying  videoconferenc¬ 
ing  are  as  variable  as  the  networks  and 
depend  on  the  number  of  installations, 
features  and  choice  of  network.  Cost  of 
ownership  runs  about  $15  per  hour  for  a 
midsize  enterprise.  It’s  safe  to  predict  that 
costs  will  continue  to  fall  as  more  people 
get  on  the  bandwagon.  And,  in  the  face  of 
rising  travel  costs,  getting  a  rapid  return  on 
your  investment  in  videoconferencing  is 
easier  now  than  ever  before. 

Perey  is  president  of  Perey  Research  and 
Consulting  in  Placerville,  Calif.  She  can  be 
reached  at  cperey@perey.com. 


Global  Test  Alliance 


■  Perey  is  also  a  member  of  the  Network 
World  Global  Test  Alliance,  a  cooperative  of 
the  premier  reviewers  in  the  network 
industry,  each  bringing  to  bear  years  of 
practical  experience  on  every  review.  For 
more  Test  Alliance  information,  including 
what  it  takes  to  become  a  member,  go  to 
www.nwfusion.com/alliance. 


Sprint  North  Supply 
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Windows 


New  desktop  operating  system  gets  high 
marks  for  reliability,  a  new  interface  and 
improved  multimedia  features,  but  changes  in 
the  networking  stack  raise  security  issues. 


BY  TOM  HENDERSON,  NETWORK  WORLD  GLOBAL  TEST  ALLIANCE 


Windows  XP,  the  long-awaited  merger  of 
Windows  versions  based  on  DOS  and  those 
grounded  in  NT,  was  released  last  week  in  New 
York.  Our  testing  showed  there  are  many 
implications  to  consider  before  deploying  XP  whole¬ 
sale  on  your  corporate  network,  including  new  and 
enhanced  distribution  methods,  changes  to  the  networking 
stack  and  potential  privacy  issues. 


Windows  XP’s  pretty  new  face 

The  Windows  XP  interface  lets  users  move  quickly  from  program  to 
program,  but  begs  for  larger  display  area. 


Microsoft  offers  users 
more  system  information 
and  personalized  options 
in  the  Start  menu. 
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Overall,  XP  is  a  relatively  reliable  operating  system,  has 
an  overhauled  user  interface  and  includes  multimedia 
enhancements. 

XP  comes  in  two  editions,  Home  and  Professional. Server 
versions  of  XP  will  likely  be  released  in  the  second  quar¬ 
ter  of  2002. The  Home  Edition  lacks  enterprise  functional¬ 
ity  including  tiered  authentication  services,  IP  Security 
(IPSec)  VPN  support,  endemic  file/folder  encryption  sup¬ 
port  and  back-up  software.  Microsoft  has  imposed  limita¬ 
tions  on  usability  of  the  Home  Edition  in  business  net¬ 
works,  but  has  paid  attention  to  building  residential  net¬ 
works  from  XP  and  connecting  those  networks  via  XP 
Home  Edition  to  the  Internet. 

The  strongest  enhancement  to  the  XP  Professional  Ed¬ 
ition  is  the  delivery  on  promises  Microsoft  made  for  Win¬ 
dows  2000.  Group  policy  administration  (via  the  Win  2000 
Active  Directory)  components  are  easier  to  define  and 
manage.  There  are  more  than  200  more  poli¬ 
cies  for  desktop  lockdown,  defining  users 
and  security  setup  than  in  Win  2000.The  new 
Resultant  Set  of  Policy  utility  gives  you  on-the- 
spot  policy  configuration  information  about 
any  PC  or  logged-on  user  and  can  help  you  to 
debug  policies  for  that  PC. 

User  mobility  functions  are  improved.  In- 
telliMirror  functions,  which  let  users  easily 
take  their  PC  desktop  and  folder  settings  to 
other  computers,  have  been  improved.  Users 
can  place  files  from  a  local,  network  or  Inter¬ 
net  files/data  source  into  portable  cache, 
making  the  data  on  remote  machines  avail¬ 
able  to  authenticated  users.  DocFinder:  6660 


Additionally  hardware  power 
management  has  been  largely 
perfected,  and  the  ability  for  a 
single  PC  to  support  multiple 
users  has  been  upgraded  with¬ 
out  sacrificing  user  privacy  or 
security  for  group-applied  pol¬ 
icy  characteristics. 
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Getting  to  XP 

From  an  installation  per¬ 
spective,  XP  is  what  Win  2000 

should  have  been.  There  are  many  flexible  installation 
choices  and  distribution  options,  far  better  attention  to 
existing  applications  compatibility  and  far  less  software 
driver  chasing  than  was  necessary  with  Win  2000. We  had 
trouble  finding  hardware  that  didn’t  work  with  XP 
upgrades  from  Windows  98  or  Win  2000.  It 
also  has  the  first  compelling  user  interface 
changes  in  six  years  —  XP  is  actually  pretty. 

The  biggest  frustration  we  found  with  XP  is 
the  lack  of  Java  support  in  its  browser.  It’s  an 
immediate  show-stopper  because  familiar 
Java  apps  —  from  simple  games  to  sophisti¬ 
cated  SNMP  monitoring  programs  —  simply 
don’t  run  at  all.  Fortunately,  a  Sun-sponsored 
interim  Java  Virtual  Machine  can  be  found 
on  the  Web  (www.nwfusion.com,  Doc- 
Finder:  6623). 

Registration  is  now  a  part  of  installation.and 
there’s  little  choice  but  registering  the  license 
of  an  XP  installation  because  it  soon  expires. 


On  the  downside,  XP  versions  won’t  load  if  the  license  is 
moved  or  migrated  to  another  PC.This  potentially  places 
a  burden  to  purchase  additional  licenses  for  XP  support  in 
large  installations  to  overcome  hardware  disasters. 

However,  in  our  tests  we  were  able  to  change  a  signifi¬ 
cant  amount  of  hardware  in  a  PC  before  XP  wouldn’t  load. 
We  don’t  know  the  exact  formula  that  stops  XP  from  think¬ 
ing  it’s  been  moved,  but  we  found  that  motherboard 
changeouts  or  significant  upgrades  (especially  CPU 
changes)  are  likely  to  trigger  XP  licensing  expiration  noti¬ 
fications.  We  also  found  the  Automated  System  Recovery 
feature  included  in  the  bundle  has  no  implications  on 
licensing  unless  aforementioned  hardware  features  were 
dramatically  changed. 

The  Networking  News 

XP  Professional  hardware  and  network  detection  has 
advanced  significantly,  and  it  does  a  better  job  than  pre¬ 
vious  versions  in  detecting  its  network  environment  and 
subsequently  making  correct  installation  settings.  Wiz- 


ards  invoked  by  XP  during  upgrades  and 
fresh  installations  complete  quickly  and 
accurately,  with  often  with  little  or  no  user 
intervention. 

XP  doesn’t  present  any  dramatically  new 
or  different  reactions  in  the  International 
Standards  Organization/Open  Systems  In¬ 
terconnection  Layers  1  through  4  over  Win 


2000  —  with  important  exceptions  noted 
below.  Unlike  its  predecessor,  XP  allows 
applications  nonroot,  raw  TCP/IP  sockets 
access.This  unprecedented  access  lets  ap¬ 
plications  tap  into  the  Winsock  API  (which 
controls  network  communications  among 
other  tasks)  without  control  of  the  operat¬ 
ing  system  kernel. 


The  good  news  is  that  streaming  media 
and  TCP/IP  communications  such  as 
browser,  mail  and/or  multimedia  traffic  no 
longer  necessarily  transverse  kernel  ad¬ 
dress  space,  and  the  kernel  might  become 
more  stable  as  fewer  demands  will  be 
placed  upon  it.  Timing-sensitive,  sophisti¬ 
cated  multimedia  applications  may  have  a 


smoothness  and  performance  improve¬ 
ment  as  another  result.The  smoothness  ef¬ 
fect  is  more  pronounced  in  older  and/or 
slower  PCs. 

The  downside  is  that  nonroot  raw  sock¬ 
ets  access  also  means  that  XP  worksta¬ 
tions,  once  infected  with  aggressive  or  hos¬ 
tile  code  in  the  form  of  viruses,  Trojans, 
zombies,  etc.,  could  wreak  havoc  on  net¬ 
work  segments,  as  applications  can  gain 
control  of  the  Winsock  API  stack  autono¬ 
mously  and  unauthenticated.  In  some 
cases,  that’s  possible  in  current  Windows 
versions  but  it’s  more  difficult  natively  as 
raw  socket  capability  can  be  installed 
through  third-  party  tool  kits  —  potentially 
letting  hostile  code  to  gain  control. 

Most  networked  PCs  haven't  used  non¬ 
root  raw  sockets  before  because  they 
haven’t  needed  them.  Microsoft  apparently 
felt  that  improved  performance  was  need¬ 
ed  over  the  potential  for  harmful  interac¬ 
tion  with  hostile  code. 

There  are  no  currently  known  attacks  that 
can  take  advantage  of  this  feature,  and 
future  security  updates  may  prevent  diffi¬ 
culties.  But  it  places  a  certain  burden  on 
network  professionals  overseeing  XP  de¬ 
ployments  to  have  integral  firewall  protec¬ 
tions  in  place.  Microsoft  includes  one, 
called  the  Internet  Connection  Firewall, 
which  can  be  used  on  LANs,  VPNs  or  dial¬ 
up  connections  to  remote  access  servers  or 
ISPs.  However,  we  noted  that  Internet  Con¬ 
nection  Firewall  affected  Ethernet  perfor¬ 
mance  in  some  cases.  We  noticed  this 
effect  on  machines  that  meet  the  minimum 
CPU  speed  requirement  (300  MHz).  XP 
Professional  and  Home  Editions  required  a 
SirCam  Virus  patch,  but  otherwise  survived 
our  Internet  Security  Systems  RealSecure 
Scanner  testing  of  the  firewall  and  other 
port  probes.  The  firewall  includes  network 
address  translation  that  didn’t  render  the 
IPSec  VPN  protocol  unusable  as  other  per¬ 
sonal  firewall  products  can. 

XP  also  supports  Session  Initiation  Proto¬ 
col,  an  enabler  for  IP  felephony  and  direc¬ 
tory-based  messaging  services,  and  in¬ 
cludes  a  peer-chat  feature  called  Windows 
Messenger  that  some  organizations  will 
support  and  others  will  take  pains  to  block 
because  of  its  potential  abuse  and/or  mis¬ 
use.  Our  tests  proved  it  isn’t  tough  to  disable 
on  individual  machines  or  to  extract  from 
corporate  upgrade  distributions. 

Organizations  wanting  the  comparative 
reliability  of  Win  2000  will  find  that  the 
wait  for  XP  has  likely  been  well  worth  it. 
However,  before  you  deploy  it,  consider 
the  sensitivity  points  of  privacy,  applica¬ 
tions  life  cycle  and  compatibility, and  the 
potential  danger  from  raw  access  to  the 
TCP/IP  sockets.  A  final  consideration  is 
that  getting  too  far  behind  the  current 
Windows  revision  demands  an  ever-  en¬ 
larging  upgrade  price-tag  tax  from  Micro¬ 
soft,  as  Microsoft  has  changed  XP  pricing 
so  that  it  is  more  expensive  to  move  to 
XP  from  Windows  NT  or  98  than  from 
Win  2000. 

Henderson  is  principal  researcher  for 
ExtrerrieLabs  of  Indianapolis.  He  can  be 
reached  at  thenderson@compuserve.com. 


Need  IT? 


Find  IT. 


BUY  IT! 


NWFusion's  Buy  IT  site  is  a  fast  and  efficient 
way  to  outsource  IT  projects. 


Simply  log-on  to  NWFusion's  Buy  IT  and 
access  complete,  up-to-date  information 
on  top-notch  IT  vendors.  Search  our 
comprehensive  directory  by  location  or 
category  and  review  vendors  online.  You  can  post  all  your  IT  needs  for 
free,  receive  competitive  bids  from  qualified  vendors  and  choose  the 
one  that's  right  for  you.  Whether  you’re  looking  for  consultants,  ASPs, 
or  contract  employees,  NWFusion  makes  buying  IT  fast  and  easy! 


BUY  IT 


IT  Vendor  Directory  &  RFP  Center 


Try  it  today  -  it's  fast  and  FREE! 

http://nwfusion.newmediary.com 


Find  the  best  vendors 
specializing  in: 


Hardware  &  Peripherals 
Internetworking 
LANs/WANs/MAN 
Networking  Services 
Business  Services 


Where  are  the  best  IT  learning  tools? 


Network  World  IT  Seminars 

Attend  these  one-day 
events  and  get  the  latest 
information  on 
LANs/MANs,  performance 
management,  security  and 
VoIP. 

The  Bookstore 

More  than  150  titles 
on  topics  such  as 
security,  network 
management, 
leadership  and 
Web  development. 


•IT  Certification 

Register  today  for  Cisco, 
Microsoft  and  other 
career-advancing 
certification  programs. 


•On-site  Training 

Save  money  and 
train  your  team 
with  our  unique, 
on-site  training! 


You'll  find  them  all  at 


NetSmart,  the  premier  source  for  IT  learning,  offers  everything  you  need  to  develop  skills,  build  knowledge  and  advance  your 
career.  And  now,  NetSmart  features  even  more  education  and  training  tools.  Keep  your  team  in  the  know  with  certification 
practice  tests,  on-site  training  and  e-learning  courses. 


Go  to  www.nwnetsmart.com  now  for: 


■  Self-paced  training  from  LearnKey!  Choose  from  more  than 

300  expert-level  IT  certification  and  business  application 
courseware  available  on  CD-ROM  or  video,  or  via  e-learning 

■  On-site  training!  Sign  up  your  team  for  hands-on  courses  in  TCP/IP  inter¬ 
networking  and  choose  a  skill  level  that’s  right  for  you.  These  new,  two-day 
customized  sessions  include  lectures,  labs  and  resource  materials.  Put  your 
team  ahead  of  the  curve  with  cost-effective,  hassle-free,  on-site  training. 


■  Certification  practice  tests.  Purchase  affordable,  high-quality, 
technical  certification  practice  tests  from  Boson  Software.  We  offer  80 
practice  tests  for  Cisco,  Microsoft,  Novell  and  Checkpoint  certification. 

■  Seminars  and  Webcasts.  Register  for  Network  World’s  face-to-face 
seminars  and  Webcasts  to  hear  what  our  editors,  industry  analysts  and 
technical  experts  from  leading  companies  have  to  say  about  the  hottest 

technologies. 


Sign  up  for  our  free  "IT  Education  and  Training"  newsletter  to  learn  about 
training  your  team,  upcoming  events,  courses,  seminars  and  more. 
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The  democracy  of  really  standard 


If  all  standards  were  really  standard,  wed 
be  able  to  take  product  specifications, 
drag-and-drop  them  into  our  simulators 
and  get  a  working  model  of  how  they  func¬ 
tion.  Wed  simply  download  the  latest  class 
object  with  the  characteristics  of  the  new 


product,  drop  it  into  our  working  network 
models  and  click  the  go  button. 

A  full  simulation  would  take  place.  Up¬ 
dates  would  automatically  occur  to  the 
asset-management  lists;  to  the  security, 
safety  and  building-code  compliance 
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Vi/ here  should 
spend  my  shrtnKing 

'When  will  IP  networks  L ^  <*0,,arS? 

I>e  secure  enough  for 
corporate  data?” 


Question  Authority. 

Get  the  facts  at  State  of  the  LAN/MAN: 

Embracing  Disruptive  Technologies. 


How  can  you  accommodate  the  steady  wave  of 
new  technologies  entering  your  local  area  network 
(LAN)  every  day?  Do  you  make  use  of  metropolitan- 
area  networks  (MAN)  to  handle  the  load?  Put  up 
firewalls  everywhere?  Invest  in  new  offload  devices? 

There’s  no  better  place  for  practical  answers  to 
questions  like  these  than  at  State  of  the 
LAN/MAN:  Embracing  Disruptive  Technologies. 

At  this  FREE  Network  World  Town  Meeting, 
you  meet  face-to-face  with  leading  industry 
experts  willing  to  share  their  ideas,  insights  and 
vision.  Even  if  they  buck  the  status  quo. 

Join  Kevin  Tolly,  president  and  CEO  of  The 
Tolly  Group,  as  he  surveys  the  shifting  LAN/MAN 
landscape  and  moderates  sponsor  strategy  presentations.  Sandra 
Gittlen,  events  editor,  Network  World,  then  leads  interactive  roundtable 
discussions  of  today’s  most  talked-about  LAN/MAN  issues.  Plus,  she 
acts  as  your  ally  to  make  sure  your  questions  are  answered. 


State  th.LAN/MAN 

Embracing  Disruptive  Technologies 
A  Network  World  Town  Meeting 


LA  (LONG  BEACH) 

November  27 

SAN  JOSE 

November  28 

NEW  YORK 

December  4 

BOSTON 

December  5 

CHICAGO 

December  12 

WASHINGTON,  DC 

December  13 

In  just  one  short  day,  you: 

■  Hear  how  10-Gigabit  Ethernet  could  alleviate 
some  of  your  congestion  woes. 

■  Access  information  about  emerging  LAN/MAN 
technologies  that  improve  service,  cut  costs 
and  boost  your  business. 

■  Ask  hard-hitting  questions  about  the  best  ways 
to  manage,  support  and  secure  your  LAN. 

■  Network  with  peers  who  face  the  same 
LAN/MAN  challenges  you  do. 

■  Gain  the  knowledge  to  make  informed  buying 
decisions. 

Do  what  more  than  5,000  leading  LAN  professionals  have  already 
done  — attend  a  FREE  Network  World  Town  Meeting.  Register  for 
State  of  the  LAN/MAN:  Embracing  Disruptive  Technologies  today. 
Don’t  miss  your  opportunity  to  question  authority. 


PLATINUM  PRESENTING  SPONSORS: 


Cisci  Systems 


ENTERASYS 


NETWORKS  . 


GOLD  EXHIBITING  SPONSOR: 
Agilent  Technologies 


» 

FOUNDRY 

NETWORKS 


River 

STONE 

NETWORKS 


Register  today  using  priority  code  LMOI  at 
www.networkworld.com/seminars/lanman  or  call  800-643-4668. 

To  become  a  sponsor  of  this  ev  ent,  please  contact  Andrea  D’Amato  at  508-490-6520  or  adamato@nww.com. 


TOWN  MEETING 

Where  technology  leaders  answer  to  you. 


standards 

sheets;  to  the  organizational  policy-man¬ 
agement  programs;  to  the  scheduling  ap¬ 
plications  and  the  investment  analyzers; 
to  the  help-desk  profiles;  the  off-site,  rec- 
ord-management/hotsite/redundancy 
agencies;  and  probably  even  to  the  Inter¬ 
nal  Revenue  Service. 

Wed  be  able  to  predict  with  unerring  ac¬ 
curacy  how  our  networks  would  respond 
to  outages  or  to  the  injection  of  loads  such 
as  Napster  or  Video  on  Demand,  conversa¬ 
tions  over  IP  or  hostile  applications.  We 
might  even  be  able  to  do  the  impossible: 
change  two  or  more  variables  at  once  with¬ 
out  the  need  for  normalizing  iterative 
results.  Fterhaps,  product  reviewers  and 
researchers  like  me  would  be  out  of  a  job. 

No,  we’re  not  there  yet,  but  we  are  slowly 
getting  closer. The  key  has  been  the  evolu¬ 
tion  of  industry  standards.  The  Interna¬ 
tional  Standards  Organization  developed 
its  famous  Open  Systems  Interconnection 
reference  model  in  the  mid-1980s  be 
cause  nothing  connected  to  anything  in 
computing,  except  for  some  obscure  pro¬ 
tocols  that  would  later  become  the  crux 
of  the  Internet.  These  days,  standards  are 
one  of  the  basic  (and  often  overlooked) 
reasons  why  we  buy  products  —  stan¬ 
dards  set  an  expectation.  And  standards 
bodies  need  help. 

The  standards  process  is  largely  vendor- 
driven  today,  with  engineers  from  network 
companies  leading  working  groups  with¬ 
in  the  IEEE,  the  Internet  Engineering  Task 
Force,  the  World  Wide  Web  Consortium 
and  the  like.  Sometimes  these  bodies  are 
connected;  other  times  they  are  not  as 
tied  into  each  other  as  they  could  be. 

On  good  days,  because  of  standards,  you 
can  connect  a  fiber-based  ATM-over-SONET 
line  to  a  router/switch  at  OC-12,  and  it 
comes  out  the  other  side  of  a  router  as 
blissful  Ethernet.  On  bad  days,  you  can  lis¬ 
ten  to  cable-testing  product  companies 
growl  that  Ethernet  and  ATM  are  standards, 
but  that  testing  them  over  unshielded  twist¬ 
ed-pair  cabling  can  be  all  but  ambiguous. 

Some  network  product  vendors  say,  “We 
love  standards;  we  bought  and  paid  for 
them.”  In  a  way,  that’s  true,  as  vendors  have 
the  money  and  competitive  onus  needed 
to  fly  personnel  to  meetings,  conduct  re¬ 
search  and  get  together  to  find  methodolo¬ 
gies  to  permit  interoperability  User  com¬ 
munities  don’t  have  those  funds. 

Standards  enforcement  is  another  mat¬ 
ter.  1  want  a  way  for  users  of  network  tech¬ 
nology  to  become  more  involved  in  the 
standards  process  without  some  of  the  in¬ 
cumbent  expense.  Then  perhaps  I  can  get 
the  other  perfect  world:  standards  bodies 
whose  standards  are  required  to  link  judi¬ 
ciously  with  other  standard  bodies’,  as  a 
standard.  As  industrial  interoperability 
was  once  an  oxymoron,  interdisciplinary 
standards  could  become  another  one. 

Henderson,  a  former  communications 
engineering  executive,  is  principal  re¬ 
searcher  for  ExtremeLabs  in  Indianapolis. 
He  can  be  reached  at  thenderson@cornpu 
serve.com. 
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■  CAREER  DEVELOPMENT 

■  PROJECT  MANAGEMENT 

■  BUSINESS  JUSTIFICATION 


Successful  schmoozing 

Network  pros  explain  how  to  work  the  room  with  confidence  to  gain  valuable  business  contacts. 


Go  to  explore  business 
opportunities,  not  to  hog  the  hors 
d'oeuvres.  Eat  before  you  mingle. 

Record  notes  on  the  back 

of  business  cards  you  gather.  _ 

Connect  within  24  hours  and 
follow  up  on  outcomes. 


Keep  encounters  to  3 

to  5  minutes.  Schedule  a 
separate  meeting  for 
problem-solving. 


Wear  a  company  shirt  and  name 
badge  on  your  right  shoulder  to 
increase  visibility;  dress  up  vs.  down. 


Prepare  a  list  of  issues, 
companies  and  people  to 
research  at  the  event  and 
arrive  early. 

Hold  your  drink  in  your  left 
—  hand  fora  dry  handshake; 
women  extend  hands  first. 

Make  eye  contact  and  watch 
your  body  language  when 
listening  to  convey  interest. 


Learn  about  others  to  take  the 
attention  off  you  and  reduce  the 
anxiety  of  talking  to  strangers. 


■  BY  SUZANNE  CASPAR 

Soon  after  Scott  Ladewig  rolled  out  Windows  2000  and  Active 
Directory  at  Washington  University,  he  became  the  big  man  on 
campus.  Ladewig,  manager  of  networking  and  operations  for 
Washington  University’s  School  of  Business,  was  in  high  demand 
among  his  peers  for  implementation  advice. 

“Department  managers  were  calling,  saying, ‘Hey,  you’ve  done  this,  what  do  1  need  to 
watch  out  for?’  Getting  known  for  a  particular  expertise  lets  you  make  yourself  a  re¬ 
source,"  says  Ladewig  from  the  school’s  St.  Louis  campus. 

Ladewig,  too,  benefits  from  talking  shop  with  colleagues  in  the  IT  industry.  In  January 
he  polled  attendees  at  a  Dell  seminar  for  insight  into  supporting  the  vendor’s  laptops.  He 
decided  to  forward  any  problem  with  students’  laptops  to  the  vendor  if  the  university’s 
IT  pros  couldn’t  solve  it  within  15  minutes. 

Far  more  than  simply  providing  social  interaction,  business  networking  helps  you  build 
reciprocal  relationships  for  sharing  knowledge  and  skills.  Professional  conferences,  trade 
association  meetings,  cocktail  receptions  and  classes  provide  many  chances  to  strike  up 
conversations  and  establish  professional  contacts.  But  to  make  the  most  of  potential  net¬ 
working  opportunities,  IT  executives  say  it’s  best  to  have  a  plan. 

Bruce  Lummis,  vice  president  of  telecommunications  for  home  shopping  giant  QVC 
in  West  Chester,  Pa.,  forms  an  agenda  for  picking  the  brains  of  others  at  annual  confer- 
ences.“The  first  thing  1  do  is  pull  out  the  attendee  list  to  see  who’s  there,  [and  find]  par¬ 
ticular  issues  I've  heard  of  or  a  company  doing  something  interesting,”  he  says. 

Ladewig  scans  the  name  tag  table  when  he  arrives  at  an  event  and  prefers  small  indus¬ 
try  venues  for  getting  to  know  folks  well  over  the  course  of  two  days.  “In  between  ses¬ 


sions,  we’re  all  just  waiting,"  he  says.“lt’s  easy  to  talk  when  you  have  something  in  com¬ 
mon  and  are  following  the  same  track.” 

Technical  classes  are  good  places  to  hear  about  how  others  are  using  technology 
“They  may  be  doing  something  we  may  want  to  try  or  see,” says  George  Lewis,  MIS  direc¬ 
tor  for  Rural  Health  Services  Consortium  in  Rogersville.Tenn. 

What’s  more,  some  of  the  best  networking  encounters  take  place  at  the  podium,  ac¬ 
cording  to  Jerry  Connelly,  IT  director  for  Galaxy  Scientific  in  Egg  Harbor  Township,  N.J. 
“It’s  good  just  to  hang  around  the  back  of  a  group  at  the  podium  after  sessions.They  may 
have  the  same  problem  that  I’m  dealing  with  and  maybe  we  have  something  to  share,” 
Connelly  advises. 

“Watch  for  people  who  ask  the  presenter  questions.  IT  folks  are  problem  solvers,”  says 
John  Bruggemam,  IS  director  at  Hebrew  Union  College  in  Cincinnati.  “You  definitely 
learn  more  from  the  bad  than  the  good,  and  sharing  misery  is  an  easy  way  to  break 
down  the  communication  barrier.” 

When  Hal  Adams  attends  an  event,  the  IS  director  for  National  Semiconductor  in 
Portland,  Maine, seeks  out  the  people  who  appear  most  interested  in  the  topic.This  tac¬ 
tic  paid  off  at  a  vendor  seminar  when  a  fellow  attendee  gave  him  “an  enormous  amount 
of  information  I  wouldn’t  get  otherwise.  I  always  want  to  hook  up  with  someone  who’s 
been  in  the  trenches,”  he  says. 

Wherever  you  go  to  forge  new  business  relationships,  follow  up  is  key.  Jot  notes  on  the 
back  of  business  cards,  scan  cards  into  a  database  back  at  the  office  or  enter  contact 
information  in  your  PDA.  Write,  call  or  e-mail  contacts  within  24  hours  of  your  initial 
meeting  if  possible  to  share  resources  or  schedule  a  follow-up  discussion. 

“If  there’s  a  common  interest,  there  will  be  some  form  of  follow-up  communication,” 
Adams  says.“l  have  called  someone  even  after  a  two-year  lapse.” 

Ray  Theberge,  vice  president  of  IS  for  Office  Resources  in  Boston,  likes  the  ease  of  us¬ 
ing  e-mail  to  keep  in  touch  with  colleagues.“After  5  o’clock,  when  I’m  sorting  papers  I 
find  moments  to  get  back  to  people  by  sending  an  article  on  a  topic  we’ve  discussed,” 
he  says.  ■ 


An  Important  Part  Of  The  Network 


GigaBit  Fault  Tolerant-Redundant  Security  Port  Selector 

Net  Optics'  Fiber  GigaBit  Fault  Tolerant  Port  Selector 
detects  fault  line  automatically  to  prevent 
your  network  traffic  from  stopping. 

This  product  is  a  MUST  for  ISP  centers, 
and  central  offices  with  critical 
data.  Works  well  with  all  GigaBit 

Servers,  Switches  brand  names.  .  irk.  Ir  *  ,  , 

Network  Redundancy!  Vour NETWORK 


TaDinto 

your  NETWORK 


'-*•  visit:  www.netoptics.com/net-96260.html 


GigaBit  Copper  to  SX,  LX  or  ZX  Fiber  Converters 

Net  Optics'  Gigabit  Copper  to  Fiber  Converter  allows 
network  managers  to  migrate  to  GigaBit  Ethernet 
in  a  cost-effective  manner. 

Simply  plug-in  the  Cables.  ^  to 


visit:  www.netoptics.com/sx-tx-converter.html 


GigaBit  ZX,  LX  to  SX  Media  Converter 

Net  Optics'  Fiber  Optic  Mode  Converter  is  used  to 
connect  two  devices  operating  with  GigaBit  multimode 
LX  fiber  to  SX  fiber. 

The  fiber  converter 
provides  transparent 
conversion  of  optical 
signals. 


'-*•  visit:  www.netoptics.com/converter-gig.html 


Fiberoptics  Cable  Assemblies 

I  he  Net  Optics’  total  solutions  approach  can  provide  you 
with  any  type  of  fiberoptic  cable  assembly  you  need, 
trom  LC,  MTRJ,  SC,  MIC,  FC  or  Escon  patch  cords  for 
air  A  I  M,  Gigabit  and  any  other  network.  \  oOP^' 

:  .sHable:  U 

iST-RJ  fiberoptic  Loopbacks. 

-  visit:  fcww.netoptics. com/2. html 


Network  Monitoring  Accessories 

In  some  countries  ISP's  must  be  TAPable...  is  the  new  Law! 


GigaBit  SX,  LX  orZX,  ATM,  DS3,  T1,  Copper  and  Fiber  Taps 

These  Splitter  Taps  have  capabilities  that  will  allow  the 
networks  to  operate  at  a  continuous  flow  while  the  tap  is 
non-operational,  thus  maintaining  network  integrity.  This 
enables  you  to  monitor  the  network  without  disconnecting 
any  one  link! 

The  Fiber  Splitter  Tap  has  passive-link  integrity  that  is 
maintained  whether  the  device  is  on  or  off. 

Copper  Gigabit  to  Fiber  Taps  feature  two  Power 
Supplies  which  are  load  sharing.  If  either  unit  fails, 
the  remaining  power  supply  comes  up  to  full  power 
and  takes  over  the  additional  load. 

Compatible  with  all  analyzer  manufacturers  including: 

Network  Associates'  Sniffer®,  Agilent's  Internet  Advisor  and 
Cisco's  SwitchProbe  products, 
visit:  www.netoptics.com/11.html 

Net  Optics’  GigaBit  TX  to  SX  Tap  is  the  market's  first 
copper  to  fiber  tap! 


Copper  100BaseT  Tap 


Intrusion 

Detection 

GigaBit  Fiber  Tap 


Fiber  LX  to  SX,  ZX  Tap 


Troubleshoot 

NETWORK 

Problems 


Optics ™ 


6  Station  Tap 


Tdf  Diagnostic 

Capabilities 
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Bright  i elects. ..  Built  for  speed/ 

Note  Sniffer®  is  a  registered  trademark  of  Network  Associates  Inc 


Net  Optics,  I  •  1230-AOId  Mountain  View-Alviso  Road  •  Sunnyvale,  CA  94089-2237  •  USA  Tel:  +1  (408)737-7777  •  Fax:  +1(408)745-7719  •  world@netoptics.com 


The  Hub  of  the  Hetwork  Buy 


When 

network  uptime 

is  your  life... 


your 

power  management 

solution  is  your  life  saver. 


Real  life  questions: 

How  much  power  is  my  equipment  using? 

Am  I  about  to  trip  the  circuit  breaker? 

What  is  the  temperature  of  my  cabinet? 

How  do  I  reboot  locked  servers  from  5000  miles  away? 


Real  life  answers: 

BayTech  power  management  solutions  with  a  return  on 
investment  that  just  makes  sense. 


You  no  longer  need  to  be  there  to  reboot  locked  routers, 
SNMP  traps  are  generated  when  you  reach  your  circuits 
capacity,  and  power  measurement  is  instantaneous. 


Reducing  downtime  and  costs  is  no  longer  a  luxury,  its  a 
requirement.  With  BayTech  remote  site  management 
solutions  you  will  not  only  do  both,  you  will  always  have 
instantaneous  access  to  your  equipment,  anytime  from 
anywhere. 


New  Zero  U  Solutions 
with  up  to  20  receptacles 

per  unit  at  up  to  30  amps 


Horizontal  solutions  with 
direct  network,  serial,  or 
modem  access 


www.baytech.net 
1-800  523-2702 
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Authorized  Reseller 


Buy  Sell  Lease  Repair 


New  Refurbished  Used 

Nortel  DSU/CSUs 

Memory  3Com 

ISDN 

1  800  553  0592 


Routers 

Switches 

Hubs 


PRODUCTS 


www.wdpi.com 


Cisco  Systems 


Email:  cisco6@wdpi.com 


Reseller 


Paragon 


Otter  // 


Raritan 

www.raritan.com 


800-724-8090 


Ronton  and  Paragon  arm  ragitiwod 
trademarks  o i  Raritan  Compotw,  Inc 


2  Under  Par. 


Life  is  good..  ■  with  Paragon,  the  highly 

acclaimed,  multi-user,  multi -platform  KVM  switch 
that  uses  Raritan's  advanced  Cat5  transmission 
technology  for  access  to  hundreds,  even  thousands 
of  servers  up  to  1 ,000  feet  away.  What  could  be 
better?  Paragon  power,  over  IP 

Paragon^  +  TeleReach™  Enterprise-class  KVM 
technology,  plus  the  fastest,  most  reliable  and  secure 
way  to  gain  remote  IP  access  to  multiple  servers  — 
no  matter  where  you  are,  or  where  your  servers  are 
located.  Manage  your  servers  from  anywhere  via  the 
Internet,  LAN/WAN  or  dial-up  modem.  Maintain, 
administer  and  troubleshoot,  even  down  to  BIOS-level. 
And  Raritan's  unique  Video  Compression  Algorithm 
and  industry-standard  1 28  bit  SSL  encryption  ensure 
speedy  and  secure  data  transfer,  even  over  modem 
or  slow  Internet  connection. 

Paragon  +  TeleReach  Winner  of  Network 
Computing's  prestigious  Editor's  Choice.  The 
complete,  hassle-free,  server  management  solution. 

Anywhere.  Anytime.  _ _ .  - 
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Server  Management 

Starts  Here... 


Rose  Electronics 

10707  Stancliff  Rd.  Houston,  Texas  77099 

800-333-9343  281-933 

USA  .  CANADA  .  ENGLAND  .  GERMANY  .  BENELUX  .  AUSTRALIA  .  SINGAPORE 


^JlROSE 

XS  ELECTRONICS 

WWW.ROSE.COM 
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Rose  Electronics  KVM  switches 
or  multiple  workstations  to  have  local  or 
access  to  multiple  computers  located  in 
rooms  or  on  the  desktop. 

Rose  is  a  leading  KVM  switch  manufacturer 
with  the  most  complete  range  of 
management  products.  A  KVM 
Rose  is  known  for  its  technically 
price  competitive  products. 

From  simple  access  to  complex  configurations, 
Rose  provides  easy  server  management 
solutions. 


Call  ROSE  today. 


simple.  Powerful,  High  Value 

Firewall 
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Global  Technology  Associates,  Inc. 

Sales:  800-775-4GTA  •  Tel:  407-380-0220 
gb-info@gta.com  •  www.gnatbox.com 


At  $995.00  with  an  unlimited 
user  license  GNAT  Box  Firewall 
isn’t  cheap.. .it’s  cost  effective. 

Features  Include: 

•  Proven  Firewall  Technology 

•  Dynamic  Network  Address  Translation 

•  Unlimited  User  License 

•  High  Performance 

•  Easy  to  Configure  and  Operate 

•  Remote  Web  Base  Management 

•  Time  Based  Access  Control 

•  Email,  Pager  &  SNMP  Trap  Alerts 

•  Email  Proxy  with  Anti-Spam  Features 

•  Win95/NT  Secure  Remote  Management 

•  URL  and  Content  Filtering 

•  Supports  Gigabit  Ethernet,  FDDI,  TokenRing 
10/100  Ethernet,  DSL,  Cable  Modem  &  PPP 

•  IPSecVPN 

•  Built-in  DHCP  Server 

•  Built-in  DNS  Server 

•  ICSA  Certified 


Now 

Available  in  the 
GB  Family  of 
Firewall 
Appliances 
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Observer  identifies  network  trouble  spots  and  costs 
thousands  less  than  expensive  hardware-based 
analyzers.  If  you  have  any  network  problems,  find 
out  the  cause  with  Observer,  Expert  Observer  or 
Observer  Suite. 

•  Full  packet  capture  and  decode  for  over 
1000  protocols,  including  TCP/IP  (v4  and  v6), 
NetBIOS/NetBEUI,  IPX/SPX,  Appletalk, 

SNA  and  DECnet 

•  Switched  mode  sees  all  ports  on  a  switch 
gathering  statistics  from  an  entire  switch  or 
packet  capture  from  any  port(s) 

•  Long-term  network  trending  collects  statistical 
data  for  days,  weeks,  months,  even  years 

•  Optimized  ErrorTrack  NDIS  drivers  display 
true  errors-by-stations 

•  Real-Time  Statistics  include  Top  Talkers, 
Bandwidth,  Protocol  Statistics, 

Efficiency  History 


EXPERT  OBSERVER® 
OBSERVER®  OBSERVER®  SUITE 

<28%  *3995 


•  Additional  probes  are  $295  per  local  or  remote 
segment/site/switch 

•  Ethernet  (10/100/1000),  Token  Ring,  FDDI 

Expert  Observer — Identifies  Problems  and 
Provides  Expert  Information  in  Plain  English 

Expert  Observer  includes  all  of  the  features  of 
Observer  plus  real-time  and  post-capture  expert 
event  identification,  expert  analysis,  VoIP  expert 
and  modeling  of  network  traffic  data. 

Observer  Suite — The  Ultimate  Tool  For  The 
Most  Demanding  Power  User 

Observer  Suite  provides  a  full  complement  of  tools 
that  includes  all  of  the  features  of  Expert  Observer 
plus  SNMP  management,  RMON  console/Probe 
and  Web  reporting.  Includes  one  remote  Probe. 


Call  800-526-7919  or  visit  us  online  for  a  full-featured  evaluation: 

www.  netw  or  ki  nstruments.com 


NETWORK 


High  Performance  LAN/WAN  Troubleshooting 
&  Protocol  Analysis  Software  Solutions 


Observer — Removes  the  Mystery  of  What  is 
Being  Sent  or  Received  by  LAN  Stations 


OBSERVER5 


US  &  Canada  (952)  932-9899  •  Fax  (952)  932-9545  •  UK  &  Europe  +44  (0)  1959  569880  •  Fax  +44  (0)  1959  569881 


The  premiere  designer  and  manufacturer 
of  modular  ergonomic  computer  support 
furniture,  enclosures  &  cabinets. 


Racking  Systems  •  Enclosures  •  19  Rackmount 
Relay  Racks  •  Personal  Workstations  •  KVM 


2-61  Borden  Ave.  L.I.C,  NY  11101 

www.hergo.com 


..V.-sv* . 


ME 


Fax 


888 


410 


0671 


hergo 


toll-free 


888. 
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ove  projects,  not  people 


The  pressure  is  on.  To  maintain  productivity  and  business-critical  communications,  while  reducing 
travel  and  IT  expenses.  What  if  you  could  collaborate  face-to-face  across  town  or  across  time 
zones  -  without  the  scheduling  and  latency  hassles  of  web  conferencing?  Access  training,  news 
and  information,  and  live  or  stored  content  at  your  desktop  -  without  costly  upgrades  to  networks, 
systems,  or  PC's.  And  point-and-click  to  make  up  to  2  MB  IP  calls  or  use  the  wide-area  network 
that  fits  your  needs  and  budget.  Life  would  be  better  in  full-motion,  decision-quality  video  and 
FM-quality  stereo... 

VNCI  Video  Networks 


VNCI 


Video  Network  Communications,  Inc 

50  International  Drive 
Portsmouth,  NH  03801-2862 


Contact  us: 

Phone:  800-763-8099 

Email:  info@vnci.net  Web:  www.vnci.net 
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Apply  for  your  own  FREE  subscription  go  to 
www.nwwsubscribe.com/pa  and  subscribe  today! 


Week  after  week  Network  World  gives  you  late  breaking  news  and 
in-depth  insights  on  infrastructure,  carriers  and  ISPs,  enterprise 
applications,  technology  updates,  security,  building  resilient 
networks,  video  conferencing  and  management  strategies. 


Plus... 


Apply  for  your  FREE  Subscription  Today 

www.nwiAisubscribe.com/pa 


•  Enterprise  level  product  testing 

•  Product  Buyers  Guides 

•  Management  surveys 

•  Signature  Series  Special  Issues 


NetworkWorld 


LEADER 


IN  NETWORK 


KNOWLEDGE 


Print  •  Online  •  Events 
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Remote  Network  Management  Solutions 


Access  Your  Network  Equipment  from  Anywhere 
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Telnet  and  Dial-Up  Console/AUX  Port  Switch 

Cost  Effective  Terminal  Server  Alternative 


lOBase-T  Ethernet  Interface 


AC  or -48V  DC  Power 


19”  Rack  Mounted 


RS232  Ports 


(  Console  Management  Switch  (CMS) ) 


8, 16  or  32  RS232  DB-9  Serial  Ports 
Simultaneous  Telnet  Sessions 
Non-Connect  Port  Buffering  -  32K 
IP  Security  Features 

Modem  Auto-Setup  Command 
Strings  (User  Definable) 

NEBS  3  Approved 


UNIX 

CONSOLE 


SUN 

CONSOLE 


R9l0TE/O<MSIMCR 


LOCAL  TERMINAL 


Telnet  and  Dial-Up  Network  Power  Switch 

Reboot  Locked-up  Equipment 


Individually  Controlled  Outlet  Plugs  (8) 


lOBase-T  Ethernet 
Interface 


19”  Rack  Brackets 
Allow  Front,  Back, 
or  Center  Mounting 


Dual  15  Amp 
Power  Circuits 


Modem  Port  for 
Out-of-Band  Management 


Local  RS232  Console  Port 


(  Network  Power  Switch  (NPSj  ) 

8  Individual  Outlets  •  Outlet-Specific  Password  Security 

On/Off/Reboot  Switching  •  Network  Security  Features 

Integral  1 0Base-T  Interface  •  1 1 5- VAC  (230-VAC  available) 
Co-Location  Features  •  Power-Up  Sequencing 


www.wti.com 


(800)  854-7226 


western  telematic  incorporated 

5  Sterling  •  Irvine  •  California  •  92618-2517 


Keeping  the  Net.. .Working! 
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Are  You  Gambling  With  Your 
Expensive  Data  Center  Systems? 


You  may  be  if  you  aren’t  using  SharkRack  cabinets  and 
racking  systems.  Our  cabinets  are  made  of  the  highest 
quality  materials,  including  aluminum  extrusion  and  heavy 
gauge  steel.  We  use  heavy  duty  fans  in  our  cooling  sys¬ 
tems.  And  SharkRacks  look  great  and  are  featured  in 
some  of  the  world’s  foremost  show-case  data  centers. 
Best  of  all,  you  can  still  access  disks,  CD-ROMs,  and 
other  components  after  your  computers  are  racked. 
Give  us  a  call  today  to  see  how  we  can  help  you 
Save  Space,  Keep  Cool,  and  Look  Good. 


The  SharkRack  NetBotz  environmental  monitoring 
Our  Keyboard/Flat  Panel  sys-  appliance  will  watch  over  conditions  in  our  cabinets 

tern  takes  up  only  1  RU  in  total.  and  send  out  an  alert  to  notify  of  problems  in  advance. 


Dealer  Inquiries  Welcome 


1-877-427-5722 

www.sharkrack.com 

infoshark@sharkrack.com 
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ISP  A  Secure  Environment 
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Enhance  Security 
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Inform  Personnel 


Train  Remotely 


EC  inc. 


Toll  Free:  l-(866)  YBRICK  1  (866-827-4251) 
Msit  oiu’  web  site  today  at 
www.vbrick.com 


VBrick  Systems  can  help  protect  your  employees  and  safeguard  company 
assets.  VBricks  solutions  enhance  security  through  DVD-quality  one-way 
streaming  and  two-way  interactive  video  on  your  existing  IP  network. 
Organizations  worldwide  use  VBrick  products  for  their  versatility,  ease  of 
use,  reliability,  and  best  of  all,  affordable  price. 


RACK  MOUNT  TFT  DISPLAYS 

We  provide  the  solutions  for  your  rack  mount  display 
requirements  with  our  innovative  TFT  product  line. 


KEYBOARD,  TOUCHPAD  AND  TRACKBALL  OPTIONS 
1U,  2U  AND  PANEL  MOUNTED  CONFIGURATIONS 
12.1",  13.3”,  15"  AND  17"  TFT  DISPLAY  SIZES 

Contact  us  for  more  information. 

www.recortec.com  1-800-729-7654  info@recortec  com 

Proudly  manufactured  in  the  U  S  A  by 

RECORTEC,  INC. 

1620-A  Berryessa  Road  San  Jose,  Ca  95133  Tel:  (408)  928-1480  Fax:  (408)  729-3661 


the  terrible  tragedies. 

But  it's  important  to  do  something;-  To  help  out.  I’m 
going  to  donate  blood  beeause  I  know  it  will  help 
save  lives.  I  don’t  mind  waiting  in  line  beeause  it's 
important.  This  is  where  I  want  to  Ik-.  With  other 
people  who  want  to  help  too." 


The  American  Red  Cross  is  profoundly  grateful  to  all 
blood  donors  everywhere,  every  day.  We  are  espe¬ 
cially  proud  of  your  commitment  to  help  save  a  life 
in  the  days,  weeks  and  months  ahead.  We  could  not 
save  lives  without  vou. 


Please  call  1 -800-GIVE  LIFE 

to  schedule  your  lifesaving  appointment 
to  give  blood. 


American 
Red  Cross 


Together,  we  can  save  a  life 
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Save  big  on  new/used:  ►  Routers  ►  Gigabit/FE/ATM  Switches 
►Access  Servers  ►Optical  Networking  ►Wireless  BUY/SELL/RENT 


...  » CISCO  ►  Juniper  ►Lucent 

►  Nortel 

►  Marconi 

£5?  www.  digitalwarehouse.  com 

>  Foundry 

►  Adtran 

K  DIGITAL  WAREHOUSE 

Your  Information  Superhighway  Discount  Sources 

►  Extreme 

►  Quick  Eagle 

Netfast  Communications  Inc.,  56-29  56th  Drive,  Maspeth,  NY  1 1378  USA 
Phone  1-888-892-4726  or  718-894-7500  Fax:718-894-1573 

Network  World  -  5/2001 


NORTEL  NETWORKS 


i.i/nu 


n 

J  J  _ 


§ 


im 


Why  Are  We  The  Best? 


•  Nortel  Service  Contracts  •  Next-Day  Hardware 

•  Nortel  Service  Renewals  Replacement 

•  Free  Technical  Support  *  Competitive  Prices 

•  Good  As  New  Gear, 

Same  as  New  Warranty 
-  at  Better  Than  New  Prices 

Refurbished  Specials: 

BayStack  450-24T  (AL2012E14)  with  MDA  Port 

10/100/1000  BT  Autosense  Switch 

Limited  Lifetime  Warranty 

Special  $995 

List  $2,695 

BLN-2  Router  Base  Unit  (71000)  -  Complete 

Includes  Dual  AC  Power  Supplies  and  SRML 

Special  $1,999 

List  $12,700 

BCN  Router  Base  Unit  (73000)  -  Complete 

Includes  Dual  AC  Power  Supplies  and  SRML 

Special  $2,999 

List  $18,150 

ARN  8  MB  Ethernet  Router  Base  Unit  (CV1001003) 

Other  Memory  Config  and  modules  avalible.  Call  now  for  pricing. 

Special  $295 

List  $1,134 

Dont  want  used?  Try  our  low  prices  on  new!  Call  Today! 

Call  for  Free  Quote!  _ 

888-8LANWAN  ^jf) 

(888-852-6926)  TB<!  - 

National  LAN  Exchange  •  WWW.nle.com 
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Cable  University 

(800)  537-8254 
www.CableU.net 

rFREE  online  training  in  network 
cabling  installation  &  maintenance 

_ 


NetworkTyaining.com 

(800)  NET-SKIL 
(800)  638-7545 

Network  Analysis  &  Tool  Training 
Certified  NetAnalyst  Testing 

BNETSYS  Inc. 

(800)  BNETSYS 
www.bnetsys.com 
Instructor  led  &  online  Cisco 
certification  training  @  no  charge 


To  Place  Your 
Listing  Here 
Call  Enku  Gubaie 
at  1-800-622-1108 


f 


Contact  these  companies 
today  to  help  you  with  your 
training  needs! 


Looking  for 
h  and  Services? 


isit  Network  World  Fusion’s 


SECTION 


www.nwfusion.com/linksmart 
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Hackers  attack  DSL  and  cable  nfijfl6SBM'sdiitions 
users 


CISCO 


New 

Fully 

Over 


800.451.3407 


Routers 
Switches 
Interface  Modules 
Access  Servers 
Accessories 


www.nEtworkhardwarE.com 

BUY  ONLINE 


NETWORK  HARDWARE  RESALES 


WRCA.NET 
NEW  USED 


AUTHORIZED  RESELLER 
Access/Routers/Switches 
Cisco  Livingston  Ascend 
3Com  US  Robotics  Kentrox 
Adtran  BayNetworks  Xyplex 
Computone  Digital  Link 
Modems  /  DSU  /  Muxes 
IBM  UDS  Codex  Hayes  GDC 
Micom  Microcom  Paradyne 
ATT  MultiTech  Penril 
Racal  Telebit  Zoom 

WE  BUY  AND  SELL 
www.wrca.net 
800-699-9722 


•  50-80%  Savings  off  Retail  List  Prices 

•  1 20-Day  Warranty 

•100%  30  Day-Money  Back  Guarantee 

•  Large  Inventory,  Same  day  Shipping 

•  Supplying  Quality  Networking  Products 
for  Over  10  Years  with  In-House  Technical  Support 


Get  More  for  Today's  Budget! 


Contact  BIZI 
to  SAVE  up  to  80% 


Request  a  Quote  on-line  at: 

http://www.bizint.com  or  info@bizint.com 

(877)  438-2494 

or  (315)  458-9606  fax:  (315)  458-9493 

Your  global  partners  n  new  &  Quality 

We  Buy,  Sell,  Trade  and  Lease...  pre-owned  networking  equipment 


CISCO,  BAY/NORTEL,  3COM,  CABLETRON,  EXTREME,  FORE/MARCQNL 
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careers 


For  over  20  years,  Syntel  employees  across  North  America,  Europe,  and 
Asia  have  helped  build  advanced  information  technology  systems  for  lead¬ 
ing  Fortune  500  companies  and  government  organizations  to  improve  their 
efficiency  and  competitiveness.  Today,  Syntel  professionals  are  building 
rewarding  careers  by  providing  solutions  in  e-business,  CRM,  Web  Design 
and  Data  Warehousing. 

Come  discover  why  Forbes  magazine  placed  Syntel  second  on  its  list  of 
“The  200  Best  Small  Companies  in  America”  and  Business  Week  ranked 
us  #1 1  on  its  list  of  Hot  Growth  Companies. 

Due  to  our  rapid  growth,  we  have  immediate,  full-time  opportunities  for 
both  entry-level  and  experienced  Software  Engineers,  Consultants, 
Programmers.  Programmer/Analysts,  Project  Leaders,  Project  Managers, 
Supervisors,  Database  Administrators,  Computer  Personnel  Managers 
and  Computer  Operations/Account  Managers/Account  Executives  with 
any  of  the  following  skills: 

Mainframe 

•  IMS  DB/DC  or  DB2,  MVS/ESA, 

COBOL,  CICS 


•  Focus,  IDMS  or  SAS 


DBA 

•  ORACLE  or  SYBASE 


•  DB2 


Client-Server/WEB 

•  Siebel 

•  Websphere 

•  Com/DCom 

•  Web  Architects 

•  Datawarehousing 

•  Informix,  C  or  UNIX 

•  Oracle  Developer  or  Designer  2000 

•  JAVA,  HTML,  Active  X 

•  Web  Commerce 

•  SAP/R3.  ABAP/4  or  FICO  or  MM 
&  SD 


•  Oracle  Applications  &  Tools 

•  Lotus  Notes  Developer 

•  UNIX  System  Administrator 

•  UNIX,  C,  C++,  Visual  C++,  CORBA, 
OOD  or  OOPS 

•  WinNT 

•  Sybase,  Access  or  SQL  server 

•  PeopleSoft 

•  Visual  Basic 

•  PowerBuilder 

•  IEF 


Account  Executives,  Account  Managers  and 
Business  Development 

Positions  available. 


Some  positions  require  a  Bachelor's  degree,  others  a  Master's  degree.  We  also 
accept  the  equivalent  of  the  degree  in  education  and  experience. 

With  Syntel  (NASDAQ:  SYNT),  you'll  enjoy  excellent  compensation,  full  benefits, 
employee  stock  purchase  plan  and  more.  Please  forward  your  resume  and  salary 

requirements  to:  Syntel,  Inc.,  Attn:  Recruiting  Manager-LDIO,  2800 
Livemois  Rd.,  Suite  400,  Troy,  Ml  48083.  Phone:  248-619-2800;  Fax: 

248-619-2888.  Equal  Opportunity  Employer. 


5«=*N"irEL 

www.syntelinc.com 
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DIRECTOR,  NETWORK  AND  TELECOMMUNICATION  SERVICES 

UNIVERSITY  OF  CALIFORNIA  SANTA  CRUZ 
Job  #01-10-55 


Oversee  four  major  service  areas  (academic  and  administrative  voice  and  data  services,  and  student 
dormitory  voice  and  data  services),  and  manage  a  budget  of  approximately  $6  million  with  a  staff  of  30.  In 
addition,  provide  high-level  technical  leadership  in  the  delivery  of  voice,  data,  video  and  wireless 
communication  services. 

Requires  education  and  experience  equivalent  to  a  Master's  degree,  direct  experience  in  strategic 
planning,  fiscal  management  and  oversight  of  a  network  and  telecommunications  organization,  and 
demonstrated  success  in  managing  large,  complex  technical  environments. 

We  offer  competitive  salaries  and  an  excellent  benefits  package.  Position  open  until  filled;  initial  review  of 
application  materials  will  begin  on  11/9/01.  To  apply,  call  (831)  459-2011  for  further  information.  Send 
application  materials  to:  UCSC  SHR/Employment,  1156  High  Street,  Santa  Cruz,  CA  95064. 


The  University  of  Santa  Cruz  is  an  AA/EEO  Employer. 


Senior  Software  Engineer  sought 
by  company  in  Englewood,  CO 
specializing  in  providing  satellite- 
DBS  to  work  in  Englewood  & 
other  anticipated  job  sites  in  the 
US.  At  a  senior  level,  engage  in 
full  life_cycle  development  of 
real_  time  software  for  satellite 
receiver  &  digital  products.  The 
software  incorporates  real_time 
system  control,  MPEG2  decoding 
&  conditional  access  manage¬ 
ment  software  which  run  on  LINUX 
operating  systems.  Analyze 
requirements.  Create  designs  & 
design  documentation.  Code, 
test,  debug  &  enhance  software 
and  systems.  Implement  the 
applications  into  the  satellite 
receiver  &  develop  LINUX  device 
driver  for  the  MPEG2  decoder  & 
conditional  access  device.  Utilize 
C,  GNU  &  GDB,  in  designing  & 
developing  the  software  applica¬ 
tions.  This  position  requires  a 
master's  degree  or  equivalent- 
specifically  it  requires  a  master's 
degree  or  foreign  equivalent  in 
electronic  &  computer  engineering, 
computer  science  or  electrical 
engineering  plus  3  yrs  of  pro¬ 
gressive  software  development 
experience;  or  a  bachelor's  degree 
or  foreign  equivalent  in  those 
same  fields  plus  5  yrs  of  pro¬ 
gressive  software  development 
experience.  Working  knowledge 
of  the  LINUX  operating  systems 
&  of  developing  applications  for 
satellite  receivers.  8am-5pm,  M- 
F,  $71 ,455/yr.  Respond  by  resume 
to  James  Shimada,  Colorado 
Department  of  Labor  &  Employ¬ 
ment,  Employment  &  Training 
Division,  Tower  II,  #400,  1515 
Arapahoe,  Denver  CO  80202  & 
refer  to  Job  Order  Number 
C05006454. 


Software  Engineer  sought  by 
company  in  Englewood,  CO  spe¬ 
cializing  in  satellite  TV  systems 
security  &  conditional  access  to 
work  in  Englewood,  CO  and  other 
unanticipated  job  sites  in  the  US. 
Under  close  supervision,  engage 
in  full  life-cycle  software  devel¬ 
opment.  Specifically,  design  & 
develop  software  applications  for 
Dish  Network,  Pay-Per-View  & 
internal  business  procedures. 
Applications  are  created  in  a 
client/server  environment  &  in¬ 
corporate  Oracle  Relational 
Database  Management  Systems. 
They  run  on  Windows  NT  & 
UNIX  operating  systems.  Ana¬ 
lyze  requirements;  create  designs 
&  design  documentation.  Code, 
test  &  debug  the  software  appli¬ 
cations.  Use  a  number  of  tools  & 
languages  including  JD-Pro, 
Clear  Case,  SEP,  Visual  Studio, 
JAVA  &  C++.  Requires  Bachelor's 
in  computer  science  or  engi¬ 
neering,  including  electrical 
engineering;  working  knowledge 
in  C++  &  developing  applications 
that  run  on  windows  and  UNIX 
operating  systems  (working 
knowledge  may  be  gained 
through  employment  or  in  an 
academic  setting).  8am-5pm, 
M-F;  $52,000/yr.  Respond  by 
resume  to  James  Shimada, 
Colorado  Department  of  Labor  & 
Employment.  Employment  & 
Training  Division,  Tower  II.  #400, 
1515  Arapahoe,  Denver  CO 
80202  &  refer  to  Job  Order 
Number  C05006458. 


Senior  Software  Engineer  sought 
by  company  in  Englewood,  CO 
specializing  in  software  develop¬ 
ment,  sales  implementation  & 
customization  services,  to  work 
in  Englewood,  CO  &  other  unan¬ 
ticipated  job  sites  in  the  US.  At  a 
senior  level,  engage  in  full  life 
cycle  software  development. 
Specifically,  design,  develop  & 
test  Geographic  Information 
Systems  software  applications 
for  public  utilities  or  utilities 
industries.  The  software  applica¬ 
tions  incorporate  client/server 
architecture  &  relational  data¬ 
base  management  systems  in¬ 
cluding  Informix  &  SQL/Server; 
&  run  on  Unix,  Linux  &  Windows 
Operating  Systems.  Analyze 
requirements.  Code,  test,  debug, 
modify  &  enhance  the  new 
software  applications.  Use  Java, 
Visual  Basic,  Delphi,  &  propri¬ 
etary  languages  &  tools  in 
developing  the  software  applica¬ 
tions.  Engage  in  project  man¬ 
agement  &  supervising  of  soft¬ 
ware  engineers  as  needed. 
Requires  Bachelor’s  or  foreign 
equivalent  in  engineering,  in¬ 
cluding  mechanical  or  electrical 
engineering,  or  computer  science; 
3  yrs  exp.  in  designing  &  devel¬ 
oping  geographic  information 
systems  for  utility  industry,  which 
incorporate  relational  database 
management  systems.  8am-5pm, 
M-F,  $77,846/yr.Respond  by 
resume  to  James  Shimada, 
Colorado  Department  of  Labor  & 
Employment,  Employment  & 
Training  Division,  Tower  II,  #400, 
1515  Arapahoe.  Denver  CO 
80202  &  refer  to  Job  Order 
Number  CO  5006574. 


Sr.  Database  Administrator  sought 
by  company  in  Colo.  Springs, 
CO  specializing  in  Computer 
software  consultancy  to  work  in 
Lowell,  MA  &  other  unanticip 
ated  job  sites  in  the  US.  At  a  sr. 
level,  design,  install,  maintain,  & 
administer  ORACLE  relational 
database  management  systems. 
Engage  in  database  &  related 
software  application  design  & 
development.  Design  &  establish 
physical  database  parameters. 
Create  &  implement  security  & 
back-up  &  recovery  procedures. 
Engage  in  performance  monitor¬ 
ing  &  tuning  of  the  ORACLE 
relational  database  manage¬ 
ment  systems  &  related  software 
applications.  Provide  user  training 
&  support.  Use  Enterprise  Man¬ 
ager  &  HP  Openview  data  ad¬ 
ministration  &  performance  tuning 
tools.  Also  use  Developer  2000, 
PL/SQL,  SQL,  UNIX  Scripting, & 
other  tools  &  languages.  Engage 
in  project  management  as  re¬ 
quired.  Requires  Bachelor's  or 
foreign  equivalent  in  comp,  sci., 
eng.,  bus.,  bus.  adm.,  sci.,  or 
related  field;5  yrs.  as  an  ORACLE 
database  administrator;  working 
knowledge  of  Enterprise  Man¬ 
ager,  SQL,  &  PL/SQL.8am-5pm, 
M-F;  $70,000/yr.(2  openings). 
Respond  by  resume  to  James 
Shimada,  Colorado  Department 
of  Labor  &  Employment.  Employ¬ 
ment  &  Training  Division,  Tower 
II, #400,1515  Arapahoe,  Denver, 
CO  80202.&  refer  to  Job  Order 
Number  C05006575. 


SYSTEMS  ANALYST:  (Lakewood, 
CO):  40  hrs/week.  Responsible 
for  assisting  w/the  delivery  of 
technical,  business  &  accounting 
solutions;  supports  functional  & 
business  analysts  in  developing 
skills  in  reconciliation  &  auditing 
techniques,  process  &  data  flow 
identification,  documentation, 
computer  software  testing  pro¬ 
cedures  &  analysis  &  writing 
custom  code  for  software  up¬ 
grades,  solve  technical  problems 
w/WAPA's  Time  and  Attendance, 
Oracle  Financials,  and  Maximo 
software  packages.  Requirements: 
Bachelor  of  Science  in  Computer 
Science  or  related  field  and  2 
year  experience  in  Computer 
Systems  Analysis/Programming. 
Experience  to  include  2  years  of 
Oracle  7. 1  or  higher  and  2  years 
PL/SQL  2.1  Must  have  proof  of 
legal  authority  to  work  in  the 
United  States.  Salary:  $63,000.00/ 
year.  Application:  by  resume  only 
to:  Colorado  Department  of  Labor 
and  Employment,  Attn:  Jim 
Shimada,  Employment  Programs, 
Tower  2,  Suite  400,  1515 
Arapahoe  Street,  Denver,  CO 
80202-21 1 7.  Refer  to  Job  Order 
#005006355. 


CacheVision  is  in  immediate 
need  of 

•  S/W  Engineers  to  develop 
state-of-the-art  interactive  appls 
and  middleware  to  enrich  user’s 
entertainment  experience  via 
cached  rich  media  content  on 
RTOSs  using  C++  and  GUI 
development  on  several  OS; 

•  Systems  Engineers  to  develop 
innovative  hardware  using  Digital 
A/V  technology  using  Oread  and 
other  design/debug  tools  and 
•Sr  S/W  Engineers  with  strong 
product  definition  and  project 
management  skills  to  lead  team 
of  S/W  Engineers  to  develop  for 
storage  centric  entertainment 
appliances.  All  positions  require 
a  BS/MS  in  CS/Engg  or  related 
field.  Competitive  salaries.  Travel/ 
relocation  required.  Resumes 
to  Attn:  Employment,  1990 
Concourse  Drive,  San  Jose, 
CA  95131  EOE 


CAD  Software  Engineer  (Archi¬ 
tecture  &  Design).  Direct  projects 
in  distribution  simulation  and 
high  level  architecture  with  the 
use  of  CAD  Develop  a  multi-user 
virtual  reality  intergame  technol¬ 
ogy  using  XML,  XSL,  JavaScript 
and  routine  infrastructure  libraries. 
Req:  Bachelors  degree  in  Building 
Science,  Planning  or  Architecture 
with  emphasis  in  advanced 
computer  applications  in  the 
areas  of  Building  Science  or 
Computer  Science  with  similar 
emphasis.  40-hr.  Wk.  Job/ 
Interview  Site:  Sunnyvale,  CA. 
Please  send  resume  to  Blue 
Pumpkin  Software,  Inc..  884 
Hermosa  Court,  Suite  100, 
Sunnyvale.  CA  94085 


Call  your 
ITcareers  Sales 
Representative 
or  Janis  Crowley. 

1-800-762-2977 
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Mirage  Software.  Inc.,  a  S/ware 
Consulting  Company  seeks  to  fill 
the  following  Multiple  Openings 
in  Arlington  Heights,  IL  S  unan¬ 
ticipated  locations  in  the  US:  Sr. 
Software  Consultants  (BS  +  3 
yrs  exp),  Programmer  Analysts 
(BS  +  2  yrs  exp).  Database 
Analysts  (BS  +  3  yrs  exp.),  and 
Project  Managers  (BS  +  3  yrs 
supervisory  exp).  Respond  by 
resume  to  HR.  855  E.  Golf  Road, 
Arlington  Heights,  IL  60005. 


Geometric  Software  Solutions,  a 
provider  of  specialized  CAD/ 
CAM/CAE  software  products  & 
software  development  services, 
seeks  qualified  Software  profes¬ 
sionals  to  fill  a  number  of  posi¬ 
tions  in  various  U.S.  locations  for 
Software  Engineers  and  Project 
Managers  in  our  various  business 
units.  Positions  require,  sound 
programming  background  in 
C++,  experience  in  developing 
CAD/CAM/CAE  software  S 
exposure  to  CAD  API  toolkits  like 
CATIA  CAA.  Salary  commensu¬ 
rate  w/  exper.  Send  Resume: 
Geometric  Software  Solutions. 
Inc.  402  Amherst  Street,  Suite 
205, Nashua,  NH  06063. 


Several  F/T  positions  open  for 
exp'ed  Prog/System  Analysts 
and  DBA's  skilled  in  some  of  the 
following:  C,  C++,  VB,  HTML, 
Java.  COM,  IIS,  ASP;  Sybase. 
SQL  Server;  Oracle,  Developer 
2000,  SQL,  PUSQL;  COBOL, 
CICS,  JCL,  DB2  etc.  All  posi¬ 
tions  require  a  BS  or  foreign 
equiv  with  cone,  in  CS/Engg  (any 
branch)  or  related  field.  Highly 
competitive  salary.  70%  traveling 
involved.  Sendresumeto:USHI 
Tech  Solutions,  Inc.  1515  Rio 
Grande,  Suite  905  Plano  TX 
75075 


Multiple  openings  available  for 
exp'ed  Prog/Systems  Analysts. 
DBAs  and  Software  Engineers. 
Duties  include  but  not  limited  to 
developing  and  designing  s/w 
systems  using  various  h/w,  OS, 
tools,  software  packages  and 
languages;  develop  client  server, 
mainframe,  midrange,  ERP  and 
web  applications;  Oracle  database 
admin/systems  admin.  All  posi¬ 
tions  require  a  BS/MS  in  CS / 
Engg  or  related  field.  Competitive 
salary.  Some  travel/relocation 
required.  Send  Resumes  to:  HR, 
Opal  Soft.  Inc.  3150  Almaden 
Expwy  Ste  205,  San  Jose,  CA 
95118. 


Computer  Systems  Analyst  req. 
by  Healthcare  Medical  Supplies 
Comp,  in  Redlands,  CA.  Duties: 
Prepare  workflow  charts  and 
diagrams  to  develop  information 
systems.  Analyze  software  using 
Java  and  Visual  Basic  for  Market 
Share  and  Retail  Pricing.  Prepare 
cost  and  time  estimates  required 
for  completed  projects.  Write 
description  of  programs  and  its 
function  in  order  to  maintain  and 
modify  system  Req.  Bachelors 
degree  in  either  Math  or  Engg.  or 
Sci,  or  Comp.  Sci  and  2  yrs.  exp. 
in  the  job  offered.  Salary  $56,000 
yr.  40  hr/wk.  Send  this  ad  and 
your  resume/letter  of  qualifica¬ 
tions  to  JOKVLO  92011.  P.O. 
Box  269065,  Sacramento,  CA 
95826-9065 


Technical  Consultant.  40  hrs/wk. 
8:00am  -  5:00pm.  $50,000/yr. 
Provide  high  level  technical 
consulting  services  as  written 
proposals,  network  (LAN/WAN) 
audits,  designs,  assessments, 
recommendations,  migration 
plans,  white  papers,  or  other 
technical  documentation.  Focus 
on  customers  in  financial/busi¬ 
ness  industries.  Manage  internal 
network  and  external  communi¬ 
cation.  Required:  Bachelor's 
degree  in  Computer  Science  or 
Bus  Admin  plus  1  year  exp  in  job 
offered  or  as  Sales  Account 
Exec  or  Bus  Systems  Consultant 
or  IT  Mgt.  One  year  of  experience 
must  include  managing  internal 
network  and  external  communi¬ 
cation  or  at  least  5  months  WAN 
design.  Schiller  Park,  IL.  Applicants 
must  show  proof  of  legal  authority 
to  workers,  including  those  with 
temporary  work  authorization. 
Send  resumes  to:  IDES,  401 
South  State  St-7  North,  Chicago, 
IL  60605,  attn:  Sheila  Lindsey. 
Ref  #  V-IL  26846-L.  An  employer 
paid  ad.  NO  CALLS  -  SEND  2 
COPIES  OF  BOTH  RESUME 
AND  COVER  LETTER. 


Analyst/Project  Programmer: 
Provide  design,  development, 
implementation  and  maintenance 
support  for  World-Wide-Web 
(WWW)  database  applications 
for  biological  and  medical  scien¬ 
tific  research.  Involves  WEB 
content  development,  database 
design  and  implementation,  CGI 
and  JAVA  application  design  and 
implementation  and  application 
interlacing  with  databases  (OR¬ 
ACLE).  Work  with  the  Director 
and  project  scientists  to  create 
WWW  applications  to  conduct 
data  collection,  validation  and 
analysis  to  directly  support  and 
conduct  the  research  project. 
Development  of  projects  in  both 
UNIX  (SUN  Solaris)  and  PC 
(Win  95  and  NT)  systems. 
Required:  Mater's  degree  in 
Statistics,  Mathematics,  or  Com¬ 
putational  Chemistry.  $42,000/ 
year;  40  hrs.  week,  8:00  a.m.  - 
5:00  p.m.  Two  copies  of  resume 
to:  Medical  College  of  Wisconsin, 
ATTN:  Employment  Office,  Dept 
PF10,  8701  Watertown  Plank 
Road,  Milwaukee,  Wl  53226. 
Job  line:  (414)  456-8193,  Email: 
mcw_emp@mcw.edu,  EOE 
M/F/D/V 


System  Administrators  wanted. 
Generates,  tunes,  configures, 
and  upgrades  Unix  and  Linux 
based  operating  systems,  and 
other  related  duties.  BS  in 
Computer  Science  or  related 
major,  and  3  yrs  related  experi¬ 
ence  required.  Send  resume  to 
World  Trade  Network,  Inc.  5433 
Westheimer,  #200,  Houston,  TX 
77056. 


Programmer  Analyst,  Software 
Engineers  and  Database  Analysts 
Various  client  server  and 
RDBMs  Technologies  including 
Reporting  and  Logistics  analysts 
and  OOPS  analysts  Variable 
locations  in  Dallas/Fortworth 
and  Houston  metro  areas. 
Contact:  Praveen  Panchakaria 
Prudent  Technologies  &  Con¬ 
sulting  Inc.  10940  Meadowglen 
Lane  #475  Houston,  TX  77042 
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TECHNICAL  CONSULTANT- 
BACK  END  DEVELOPMENT- 
(Champaign,  ILJResponsible  for 
the  construction  phase  of  the 
Software  Development  Life 
Cycle,  consisting  of  coding  in 
COBOL,  JCL,  DB2  &  VSAM, 
code  review,  unit  testing,  accep¬ 
tance  testing  and  implementa¬ 
tion  tasks  as  well  as  some  light 
detailed  designing  &  producing 
requisite  design  deliverables  per 
the  SDLC  in  a  commercial 
environment.  Also  responsible 
for  the  execution  of  some  standard 
baseline/regression  or  client 
tests,  also  in  a  commercial 
environment  following  document¬ 
ed  test  procedures.  Req'd.: 
Bach.  Deg.  in  Comp  Sci,  Physics 
or  any  Math,  Electronics  or 
Engineering.  Must  have  2  yrs. 
exp.  in  job  offered  or  as  a 
Programmer  Analyst  or  a  Soft¬ 
ware  Developer.  Must  have  exp. 
to  include  developing  &  testing 
of  software  in  a  commercial 
environment  using  COBOL. 
JCL,  DB2  &  VSAM.  40  hrs/wk. 
9am-5pm.  $70,277.80/yr.  Appli¬ 
cants  must  show  proof  of  legal 
authority  to  work,  including  those 
with  temporary  work  authorization . 
Send  resumes  to:  Illinois  Dept  of 
Employment  Security.  401  S. 
State  Street  -  7  North,  Chicago, 
IL  60605  Attention  Sheila  Lind¬ 
sey.  Reference  #V-IL26920-L.  An 
Employer  paid  ad.  No  calls  - 
Send  2  copies  of  both  resume  & 
cover  letter. 


Computers-Citicorp  N.A.  seeks: 

Software  Developers-Web 
Developers/Administrators-QC 
Analyst-Project  Managers- 
Programmers/Systems  Analyst/ 
Administrators-e-Commerce 
Specialist-IT  Directors-Technology 
Managers-DBAs.  For  our  Florida 
location  with  BS  or  MS  in 
Computer  Science;  Engineering; 
Math;  Science  &  Information 
Technology  or  equivalent  or 
qualifying  experience  in  any  of 
the  following:  Windows,  UNIX, 
NT,  AIX,  Sun/Solaris,  SL, 
Sybase,  Oracle,  E-space, 
C.C++,  ProC,  Vbasic,  ASP, 
Microsoft,  Nortell  Networks, 
JavaScript,  Netscape,  MS  IIS, 
Shell  Scripting,  HTML,  SQL, 
FoxPro,  Perl,  Avaya,  Networking 
Security  Tools,  QC,  Encryption 
Tools,  CASE  Tools,  LAN/WAN/ 
Voice/Data  &  E-Commerce 
Technologies.  An  equal  opportu¬ 
nity  employer.  M/F/D/V.  Mail 
resumes  to  Citicorp  N.A.,  Human 
Resources,  1401  W.  Commercial 
Blvd.,  Ft.  Lauderdale,  FL  33309, 
Attn:  M.M.  NO  CALLS  OR 
FAXES.  PLEASE. 


Programmer  in  Delphi 
language  with  BS  degree  and  3 
months  exp.  wanted  in 
Houston,  TX. 

Respond  to:  Alan  Williams, 
Travis  Software  Corp.,  1155 
Dairy  Ashford,  #315,  Houston, 
TX  77079. 


General  Dynamics  Creative 
Concepts  Corporation,  a  soft¬ 
ware  development  company  in 
Boulder,  CO  needs  Application 
Specialist  to  design  and  develop 
content  management  applica¬ 
tions  which  incorporate  RDBMS 
in  an  N-Tier  environment.  Position 
requires  two  year's  experience 
designing  and  developing  soft¬ 
ware  applications  using  RDBMS 
in  a  client/server  or  N-Tier  envi¬ 
ronment;  and  working  knowledge 
utilizing  HTML,  XML  and  Docu- 
mentum  in  the  design  and 
development  process.  Applicants 
should  send  resumes  via  surface 
mail  to  Mr.  Joel  McFadden,  4949 
Pearl  East  Circle.  #200,  Boulder, 
CO  80301 ,  and  should  reference 
job  number  R4058. 


SOFTWARE  ENGINEER  to 
provide  on-site  consultancy  to 
analyze,  design,  build,  integrate 
and  support  complete  Systems 
Development  Life  Cycle  (SDLC) 
systems  based  on  Sun  Enterprise 
10000  UNIX  mainframe,  EMC 
Symmetrix  data  storage  arrays; 
design  and  support  UNIX/net- 
work  software  for  internet-based 
failsafe  system  with  Oracle 
Parallel  Server  (OPS),  Java  and 
BEA  Weblogic  application  server. 
Require:  M.S.  (or  equivalent)  in 
Computer  Science/Electronics 
Engineering  and  three  years 
experience  in  the  job  offered  or 
as  Systems  Consultant.  B.S.  and 
5  years  experience  may  be 
substituted  for  M  S.  and  3  years 
experience.  40%  travel  to  cus¬ 
tomer  sites  within  the  United 
States.  Salary:  $67,500  per  year, 
8  am  to  5  pm,  M-F.  Apply  with 
resume  to:  President,  Business 
Oriented  Software  Solutions, 
Inc.,  160  Technology  Parkway, 
Norcross,  GA  30092. 


Programmers  and  Systems 
Administrators  needed  in  A,  B. 
C,  D,  (A);  VB,  Com,  ASP,  Delphi, 
SQL  Server,  Sybase,  C++;  (B) 
Rational  Rose,  C,  Java  and 
related  tools,  VB,  ASP, 
Com/DCom  (C)  Sybase,  Oracle, 
VB  Powerbuilder,  Unix  Shell 
Scripts,  Sybase  Tools  and  related 
3rd  party  tools  (D)  Perform  sys¬ 
tem  admin,  including  system 
design,  and  enterprise  level 
network  design,  install  various 
OS  and  DBMS,  network  security, 
configuring  NIS/NIS+,  and  com¬ 
plex  TCP/IP  networks  for  mis¬ 
sion  critical  operations.  Prevailing 
wage  and  benefits.  BS/BA  or 
foreign  equiv.  with  2  yrs.  exp.  in 
job  offered.  These  are  consulting 
positions  requiring  travel  to  client 
sites.  For  complete  job  descrip¬ 
tion  or  to  apply,  please  contact  or 
send  resume  with  positions(s) 
interested  to  Christie  Tucker, 
SourceTec,  Inc.,  292  South  Main 
St,,  Suite  500  Alpharetta,  GA 
30004.  EOE. 


F/T  Applications  Developer.  Re¬ 
sponsible  for  developing  &  main¬ 
taining  application  software  & 
programming  languages  to  create 
on-line,  batch  &  web-enabled 
business  applications  using 
SQL,  PL/SQL,  Pro'C,  Oracle  8i, 
Sun  Solaris,  Power  Builder  5.0  & 
6.5,  SCO  Unix  &  Windows,  Visual 
Basic  &  C++.  Provide  technical 
support  &  troubleshoot  applica¬ 
tion  defects  &  bugs.  Perform 
technical  research  &  assist  w/ 
enhancing  &  designing  new  as 
well  as  existing  business  appli¬ 
cations.  Must  have  Bachelor's 
degree  in  Computer  Science  or 
related  field.  Employer  will  accept 
a  Master's  degree  in  lieu  of 
the  Bachelor's.  Foreign  degree 
equivalent  accepted.  Must  have 
6  years  of  experience  in  job  offered 
or  position  with  same  duties. 
Salary:  $81 ,950.  Send  resume  to 
Kimberly  A.  Voulgaris,  MAPICS, 
Inc.,  600  West  Cummings  Park, 
Woburn,  Massachusetts  01 801 . 


Net  Working  System 
Administrator 

A  Net  Working  System  Adminis¬ 
trator  needed  to  manage  and 
maintain  windows  1 000  advance 
server  and  professional  desk 
top.  Develop  Intell  mirror  and 
systems  management  server, 
Maintaines  and  modifies  routine 
programs.  Makes  approved 
changes  by  amending  program 
flow  charts.  Developing  detailed 
processing  logic  and  coding 
changes.  Tests  and  documents 
modifications  and  writes  operator 
instructions.  May  write  routine 
new  programs  using  prescribed 
specification,  may  confer  with 
EDI  personnel  to  clarify 
procedures  processin  logic  etc. 
Salary,  $36,213  per  annum. 
Please  send  Resume  to  P.O. 
Box:  55764,  Birmingham,  AL 
35255. 


Software  Consultancy  in 
Metuchen,  New  Jersey  seeks  to 
fill  multiple  job  openings  for: 
Systems  Analysts/Management 
Systems  Analysts  -  Designing, 
developing,  installing  and  proto¬ 
typing/maintaining  IT  applications 
in/using: 

1 .  C,  Oracle,  and  Unix 

2.  Oracle,  in  Windows  and  Unix 
environments. 

3.  SQL.  SQL  Plus.  SQL  Server, 
and  in  Windows  environment. 

4.  Oracle,  Visual  C++.  Turbo 
C++,  in  a  Unix  and  Windows 
NT  environment. 

All  positions  require  a  Bachelor's 
degree  or  it's  equivalent  in 
Mathematics,  Science,  Computer 
Science.  Engineering  or  related; 
and,  a  minimum  of  one  to  two 
years  of  experience  in  the  skill 
sets  listed  above.  Any  combination 
of  education  and  experience  that 
equates  the  minimum  educational 
requirements  will  be  accepted. 
Post  resume  to  Innospire  Systems 
Corporation,  267  Amboy  Avenue, 
#  14  A,  Metuchen,  NJ  08840, 
USA.  Fax:  208-728-5619  E-Mail 
personnel  @  innospire.com 


F/T  Support  Services  Consultant 
Manager:  Responsible  for  pri¬ 
mary  interface  for  all  customer 
support  issues,  upgrades  & 
enhancements  related  to  BSCS 
&  supporting  product  suites. 
Identify  clients  business  require¬ 
ments,  determine  needs,  create 
functional  design  specifications 
&  provide  functionality  &  config¬ 
uration  information.  Develop  test¬ 
ing  strategies,  plans  &  analyze 
computer  codes  to  determine 
database  defects  &  provide 
product  support  solutions  using 
BSCS  in  C  programs  running  on 
UNIX  systems  w /  Oracle,  Centu¬ 
ra  applications,  Oracle  DBMS, 
SQL,  PL/SQL  &  CMVC.  Must 
have  Bachelor's  degree  in  CS, 
Info.  Systems,  Electronic  & 
Telecom.  Engin.  or  related  field. 
Foreign  deg.  equiv.  accepted. 
Must  have  2  yrs.  exp.  in  job 
offered  or  position  w /  same  duties. 
Salary:  $78,500.  Send  resume: 
Betsy  Moya,  Serna,  701  Waterford 
Way.  Ste.  300,  Miami,  FL  33126. 


SYS.  ENGR. 

Utilize  knowl.  of  networks  &  opr. 
sys.  to  rsch.,  dsgn.  &  dvlp. 
networks.  Spec,  duties  inch:  (i) 
install.,  config.,  &  maintain  back¬ 
up  strategies;  (ii)  dvlpg.  data 
storage  &  mgmt.  solns.;  (iii) 
dvlpg.  sys.  security  &  disaster 
recovery  sys.;  (iv)  dsgng., 
implement.  &  admin.  Local  Area 
Networks  &  Wide  Area  Networks; 
&  (v)  config.  &  maintain,  servers 
to  ensure  optimal  perform,  in 
order  to  meet  client  rqmts. 
Bachelor's  degree  or  equiv.  in 
Comp.  Sci.,  Math,  Bus.,  Engrg. 
or  Commerce  plus  2  yrs.  of  exp. 
in  position  offrd.  or  as  a  Network 
Analyst  or  System  Administrator 
rqd.  Exp.  must  incl.  Novell 
Netware,  Windows  NT  &  CISCO 
orTCP/IP.  High  mobility  preferred. 
40  hrs/wk,  8  am  -  5  pm,  OT  as 
rqd.,  $66,670/yr.  Qualified  appli¬ 
cants  report/submit  resume 
to:  Fayette  County  Team  PA 
CareerLink,  ATTN:  JS  Supervisor, 
32  Iowa  St.,  Uniontown,  PA 
15401-3513.  Refer  to  Job  Order 
No.  WEB206432. 


Software  Developer  -  Deerfield 
Beach,  Florida  Requires  a 
Master's  Degree  in  Information 
Technology  and  2  years  Visual 
Basic  programming  experience. 
Develop,  implement  and  maintain 
application  software  to  established 
standards  and  specifications: 
develop  application  software  and 
implement  approved  changes 
using  Visual  Basic  and 
other  approved  programming 
languages.  Contact:  Joe  Bozza, 
Human  Resources,  Campus 
Management  Corp,  10  Fairway 
Drive,  Suite  300,  Deerfield 
Beach,  FL  33441.  Email: 
jbozza@campusmgmt.com 


DATAFORMIX  Technologies, 

Inc  has  several  openings  in  New 
Jersey  and  other  locations 
nationwide  for  Programmer 
Analyst/System  Analyst/Software 
Engineer  (PA),  with  at  least  two 
years  of  experience  in  any  of  the 
following  skills. 

PA:  VB,  Delphi,  Java,  J2EE, 
JVMPI,  JNI,  JDI,  EJB,  SOAP, 
PB,  C++,  VC++,  Web.  E- 
Commerce,  CORBA.  Web  Tele¬ 
phone.  AUTOCAD,  AUTODESK 
SDF,  EDI,  CGI/Perl,  SAP  HR 
(Payroll,  Time  Management. 
Payroll  Schema  Must),  XML, 
XSL,  UML,  DSDM. 

Some  positions  also  require 
a  Bachelors  Degree,  others 
Masters  Degree.  Equivalent 
degree  and  experience  is 
accepted.  Exc.,  Pay  &  Bnfts. 
Please  indicate  the  position  you 
are  applying. 

Mail  resume  to: 

HR  Dept.,  Dataformix 
Technologies,  Inc., 

1075  Easton  Avenue,  Tower 
3,  Suite  100, 
Somerset,  NJ  08873. 


PROGRAMMER  ANALYST 

Analyze  &  eval.  existing  or 
proposed  software  sys.  Dvlps., 
implements  &  improves  prgms., 
sys.  &  related  procedures,  to 
process  data  using  in-depth 
knowl.  of  the  sys,  dvlpmt.  life 
cycle.  Encodes,  tests,  debugs  & 
installs  opr.  prgms.  &  other  sys. 
software  utiliz.  knowl.  of  Lotus 
Notes  databases  &  related 
prgm.  langs.  Bachelor's  degree 
or  equiv.  in  Comp.  Sci.,  Math, 
Bus.,  Engrg.  or  Commerce  plus 
2  yrs.  of  experience  in  position 
offrd.  or  as  a  Program.  Analyst, 
Software  Engr.  or  Sys.  Analyst 
rqd.  Exp.  must  incl.:  a)  Lotus 
Notes;  &  b)  Lotus  Script.  High 
mobility  preferred.  40  hrs/wk, 
8  am  -  5  pm,  OT  as  rqd., 
$66,670/yr.  Qualified  applicants 
report/submit  resume  to: 
Manager,  Armstrong  County 
Team  PA  CareerLink,  1270 
North  Water  St.,  PO  Box  759, 
Kittanning,  PA  16201-0759. 
Refer  to  Job  Order  No. 
WEB206422. 


Systems  Administrator  (3  Posi¬ 
tions):  Responsible  for  performing 
hardware  and  software  installa¬ 
tions  and  upgrades,  developing 
UNIX  shell  scripts,  and  archi¬ 
tecting  system  performance  and 
system  tuning  enhancements. 
Coordinate  changes  to  environ¬ 
ment  with  software  vendor  and 
operations,  interact  with  software 
development  teams  to  resolve 
issues  and  document  actions 
taken.  Additional  responsibilities 
include  tuning  Oracle  and  other 
databases  with  DBA.  installing 
file  server,  and  trouble  shooting 
production  and  network  related 
problems.  Will  also  conduct  per¬ 
formance  tuning,  monitoring  and 
escalation.  Requires:  Bachelor's 
degree  in  Computer  Science  or 
Engineering  and  have  two  years 
experience  in  Systems  Adminis¬ 
tration.  Must  have  knowledge  of 
DNS.  NIS,  NFS,  UNIX  and  HP- 
UX.  40hrs/wk  (8-5);  $75,000.00/ 
yr.  Send  two  resumes/responses 
to  Job  Orders  #2001  -829, 2001  - 
830,  2001-953,  P.O.  Box  989, 
Concord,  OH  03302-0989. 


Software  Developer:  Design  & 
develop  client/server  &  web 
based  apps  for  software  consul¬ 
tancy  clients  Interface  w/Oracle 
8  other  dbs  using  C++,  C, 
VB.  JAVA(JDK  1.1.x).  HTML, 
SERVELTS,  JDBC,  VISUAL 
AGE.  WEBSPHERE.  SQL,  on 
Windows  NT.  UNIX  &  Mac  OS 
platforms.  Long  term  assignment 
at  cust  locations  across  U.S 
(60%  travel).  BS  in  comp  sci, 
engg  or  related  tech  field  and  2 
yrs  exp  in  development,  analysis, 
or  prog  Resumes  to:  MKukkala, 
Sai  Ram  Consultants,  Inc.  2179 
Lawrenceville  Hwy  Suite  202, 
Lawrenceville,  GA  30044 
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|  Paceline  Systems  is  at  the 
torefwtt  of  developing  advanced 
switching  systems,  using  Infini¬ 
Band  (TM)  technology  for  the 
next  generation  of  web  data 
centers  to  deliver  new  levels  of 
performance,  efficiency,  and 
service  flexibility.  We  currently 
have  openings  for  the  following: 

Hardware  Engineers:  Design 
and  implement  circuit  assemblies 
and  electrical  circuit  card  mod¬ 
ules  and  component  sections. 
Support  the  design  of  circuit 
modules  PCB's  including  layout, 
stacking  and  routing.  Debug 
prototype  modules  Design  veri¬ 
fication  testing  and  signal  integrity 
testing  ot  circuit  modules.  Will 
employ  ViewDraw  and  Allegro 
Viewer  Requires  4  years  experi¬ 
ence  in  job  or  as  hardware 
engineer  for  telecom  industry. 
Also,  demonstrated  expertise 
designing  and  debugging  circuit 
cards  and  experience  using 
ViewDraw  or  Allegro  Viewer  and 
working  with  VHDL  language 
and  programmable  logic  design. 

Software  Engineers:  Will  work 
with  senior  engineers,  you  will  be 
developing  components  of  the 
next  generation  of  networking 
services,  based  on  high  bandwidth 
Infiniband  (TM)  technology.  Will 
work  with  principal  and  senior 
engineers  to  design  specific 
networking  services  components 
based  on  Infiniband  technology. 
Will  design  and  implement  net¬ 
working  services  and  solutions 
based  on  functionality  and  re¬ 
quirements  defined.  Requires  1 
year  experience  in  job  or  in 
network  software  design/devel¬ 
opment.  Also,  demonstrated  ex¬ 
pertise  in  networking  protocols 
or  ATM  Networking  and  using 
C/C++  and  real  time  OS,  such  as 
UNIX  or  Linux,  as  well  as  using 
two  or  more  of  following  proto¬ 
cols;  DNS.  TCP.  SLP,  DHCP, 
BOOTP,  or  BGP. 

Senior  Test  Engineers:  Will  build 
test  infrastructure  for  proprietary 
product  verification  organization. 
Will  conduct  extensive  test 
automation  script  development 
for  functional  testing  in  accor¬ 
dance  with  internally  developed 
test  plans.  Requires  4  years 
experience  in  software  testing  or 
development.  Also,  demonstrated 
expertise  in  software  testing 
such  as  developing  test  plans 
and  functional  test  automation  in 
datacom  test  environments  as 
well  as  experience  using  one  or 
more  scripting  languages  such 
asTcl,  Perl,  Python 

All  positions  require  a  Bachelor's 
degree  (or  equiv)  in  CS,EE,  Math, 
Physics,  or  a  closely  related 
field.  Interested  applicants 
may  send  their  resume  to  Bob 
Lippman,  Paceline  Systems,  50 
Nagog  Park,  Acton,  MA  01720, 
or  F  978-263-8381.  jobs© 
pacelinesystems.com 


IntraLinks.  Inc. 

We  are  looking  for  qualified 
candidates  to  fill  a  number  of 
open  IT  professional  positions  of 
all  levels  (including  entry, 
advanced  and  managerial)  in 
our  NYC  and  Boston  offices: 

Manager  of  Technology 
(Sr.  Software  Engineer) 
Technical  Sales  Manager 
Project  Managers 
Software  Engineers 
Consulting  Software  Engineers/ 
Analysts 

Programmer  Analysts 
OA  Analysts 
Java  Developers 
Database  Designers 

Must  have  appropriate  educa¬ 
tional  training  and  knowledge  of 
relevant  technologies.  Salary 
j  •.xx'i'n+nsurate  with  qualifications 
I  IntraLinks  is  growing  rapidly,  an 
j  -  enthusiasm  is  contagious. 

-  taive  a  strong  foothold  m  our 
i  i+^rndinjoientumtocatapult 
|  .  gh  fie  next  millennium 

j  '  Applicants  send  your 

>  ■  i*  ic  tfoghan  Boucher, 
(  t,"\L  39  Bedford  St, 

!  i  .'Stun  MA  02111,  Attn, 
i  .  ‘V..:  tiir.tratinks.com 


Senior  QA  Test  Engr.  Up  to 
$70,000/Yr,  Job  Duties:  Respon¬ 
sible  for  QA  stds..  procedures  & 
metrics,  testing  proc.,  manual/ 
automated  test  scripts  for 
regression  8  load  testing  of  web 
based  applications,  verification/ 
validation  of  documents/codes 
at  all  stages  of  software  devel¬ 
opment  life  cycle  (SDLC)  utilizing 
problem  &  code  debugging,  load 
run  execution,  fault  tracking,  & 
statistical  analysis.  Specific  job 
functions:  participate  in  every 
facet  of  SDLC  including  formula¬ 
tion  of  requirements,  design, 
code  reviews,  testing;  test  software 
applications  in  Unix  &  Windows 
environments;  select  test  cases 
to  verify/validate  requirements; 
identify  process  design  flaws; 
integrate  hardware  &  software 
components  into  working  sys¬ 
tems;  develop  &  execute  test 
scripts;  document  &  maintain 
test  plans,  procedures  &  reports. 
Additionally,  following  code 
completion  &  unit  testing,  retest 
product  against  design  require¬ 
ments,  document  bugs,  develop 
fixes  &  update  test  plans.  Must 
be  certified  as  a  "CQA-  Certified 
Quality  Analyst"  &  2  years  of  exp. 
with  Mercury  Automated  Test 
Tools,  Object  Oriented  Programs, 
UNIX,  Java,  &  Web  Environment. 
Requires  BS  in  Comp.  Sci.  or 
Engineering  &  2  years  of  exp. 
Apply  to  Pathfire,  245  Hembree 
Park  Drive,  Ste.  100,  Roswell, 
GA  30076  with  proof  to  work 
permanently  in  US. 


Sr.  Database  Administrator. 
Maintain  multiple  ADABAS  and 
ORACLE  databases  (DB);  install 
&  maintain  DB  mgmt  s/w  & 
related  products,  incl  ADABAS. 
NATURAL,  PREDICT,  ENTIRE- 
NET-WORK,  ENTIRE-ACCESS, 
NATURAL  SECURITY,  & 
ORACLE  RDBMS;  design, 
implement,  &  maintain  DBs 
&  DB  dictionaries;  monitor  DBs 
for  validity,  organization,  protec¬ 
tion,  security,  &  performance;  in¬ 
stall  &  configure  new  versions; 
proactively  monitor  &  maintain 
perform;  maintain  data  &  pro¬ 
gram  security;  &  provide  guid¬ 
ance  &  assistance  for  less  exp 
personnel  in  DB  app  develop¬ 
ment,  testing,  &  maintenance. 
B.S..  Comp.Sci.  or  equiv.;  &  5  yrs 
exp  as  Database  System  Eng, 
Consultant  (or  equivalent  based 
on  education  &  experience),  3 
yrs  of  which  shd  be  w/each;  SAG 
products  (incl  ADABAS.  NAT¬ 
URAL),  ORACLE,  UNIX,  CICS, 
NATURAL  SECURITY,  PREDICT, 
DOS/VSE  ESA,  and  ENTIRE. 
Exp.  may  be  gained  concurrently. 
$64,690/yr.  40  hrs/wk.  All 
resumes  must  incl  Soc  Sec  #. 
Apply  to  your  nearest  Job 
Service  office  or  send  resume  to 
Job  Service.  1316-C  N.  Broad 
Street,  Edenton,  NC  27932. 
Refer  to  J.O.  #NC  3203861 ,  DOT 
Code  039. 1 62-01 0.  If  not  a  U  S. 
citizen,  specify  current  visa 
status. 


F/T  Software  Engineer.  Respon¬ 
sible  for  creating  Functional 
Specification  documents  based 
on  design  requests  &  producing 
&  implementing  High  Level 
Designs  for  assigned  functional 
areas  Perform  Unit  Testing  on 
developed  codes  &  troubleshoot 
defects  found.  Design  &  imple¬ 
ment  new  modules'enhancements 
in  client  server  environments  & 
for  the  billing  network  system. 
Provide  technical  support  to 
clients,  evaluate  business  re¬ 
quirements  &  develop  software 
&  documentation  according  to 
established  standards  working 
w/  Centura  Team  Developer  w/ 
embedded  SQL,  Logic  Works, 
ERWin,  Gupta  SQL,  Sybase 
SQL  Server.  MS  SQL  Server, 
Visual  Basic.  MS  Access  & 
Crystal  Reports.  Must  have 
Bachelor's  degree  in  Computer 
Science  or  related  field  Foreign 
degree  equivalent  accepted 
Must  have  4  yrs.  exp.  in  job 
offered  or  position  w/  same 
duties.  Salary:  $63K  Send 
resume:  Betsy  Moya,  Serna,  701 
Waterford  Way,  Suite  300,  Miami, 
FL  33126. 


Vice  President-Technology  & 
Operations.  Miami,  FL.  Duties: 
Invision,  plan,  &  implement  tech¬ 
nology  to  enable  operational 
efficiency  &  to  increase  revenue 
through  the  use  of  the  Internet 
&  other  computer  technology. 
Utilize  Microsoft  Windows  XP, 
Sharepoint,  Internet  Information 
Server  (IIS),  XML,  Mobile  Infor¬ 
mation  Gateway,  Visual  Studio, 
Java,  HTML,  &  Active  Server 
Pages.  Develop  backend  pro¬ 
rams  integrating  w/  Great 
lains  Accounting  software  & 
the  use  of  IBM  Websphere  & 
related  products.  Use  of  in-depth 
knowledge  of  end  to  end  busi¬ 
ness  transactions  in  an  interna¬ 
tional  environment  for  consumer 
electronics.  Prior  significant 
mgmt  background  required. 
Develop  business  plans  &  build 
&  manage  a  team  to  deliver 
products.  Reqs:  M  S.  degree  in 
Comp.  Info.  Systems  &  3  yrs  exp 
in  the  job  offered  or  3  yrs  exp 
as  a  Sr  Architect/Developer  or 
combination  thereof.  Exp  which 
may  have  been  obtained  con¬ 
currently  must  include  1  yr  of  exp 
utilizing  Java  &  IBM  Websphere 
&  3  yrs  exp  developing  &  man¬ 
aging  computer  systems  in  a 
business  to  client  relationship. 
Mail  resume  to:  Kishinchand 
Parvani,  Pres.,  Transcontinental 
Overseas,  Inc.,  1362  NW  78th 
Ave,  Miami,  FL  33126. 


PROGRAMMER  ANALYST 

Analyze  &  eval.  existg.  or 
proposed  software  sys.  Dvlps., 
implmts.  &  improves  prgms.,  sys. 
&  related  procedures  to  process 
data  using  in-depth  knowl.  of  the 
sys.  dvlpmt.  life  cycle.  Encodes, 
tests,  debugs  &  installs  opr. 
pgms.  &  other  sys.  software 
utiliz.  knowl.  of  Visual  Basic 
prgmg.  tools.  Bachelor's  deg. 
or  equiv.  in  Comp.  Sci.,  Math, 
Commerce,  Engrg.  or  Bus.  plus 
2  yrs.  of  exp.  in  position  offered 
or  as  a  Programmer  Analyst, 
Software  Engr.  or  Sys.  Analyst 
rqd.  Exp.  must  incl.  a)  RDBMS 
ENVR.:  Oracle  or  Sybase;  &  b) 
PROGRAMMING  LANGS.:  Java 
or  COBOL  or  PL/SQL.  High 
mobility  preferred.  40  hrs/wk,  8 
am  -  5  pm,  OT  as  rqd., 
$66,670/yr.  Qualified  applicants 
report/submit  resume  to: 
Manager,  Westmoreland  County 
CareerLink,  300  East  Hillis  St., 
Youngwood,  PA  15697-1808. 
Refer  to  Job  Order  No. 
WEB206416. 


Integration  Software  Engineer 
needed  to  develop  applications 
&  implement  advanced 
integration  solutions  using 
SeeBeyond,  PeopleSoft,  Java, 
XML,  PeopleCode,  Monk,  &  SQL. 

Apply  to:  C.  Andrews,  Global 
Enterprise  Mgrs,  1434  Malcolm 
Dr,  Deresher,  PA  19025. 


SYS.  ENGR. 

Analyze  &  eval.  existg.  or 
proposed  software  sys.  Dvlps., 
implmts.  &  improves  prgms.,  sys. 
&  related  procedures  to  process 
data  using  in-depth  knowl.  of 
the  software  dvlpmt.  life  cycle. 
Encodes,  tests,  debugs  &  installs 
opr.  pgms.  &  other  sys.  software 
utiliz  knowl.  of  Visual  Basic 
prgmg.  tools.  Associate  deg.  or 
equiv.  in  Comp.  Sci.,  Math, 
Engrg.,  Bus.  or  Commerce  plus 
2  yrs.  of  exp.  in  position  offered 
or  as  a  Software  Engr.  or  Sys. 
Analyst  rqd.  Exp.  must  incl. 
Access  or  SQL  Server  &  Visual 
Basic.  High  mobility  preferred  40 
hrs/wk,  8  am  -  5  pm.  OT  as  rqd.. 
$66.671/yr.  Qualified  applicants 
report/submit  resume  to. 
McKeesport/Allegheny  Cty. 
CareerLink,  ATTN:  JS  Supervi¬ 
sor,  345  Fifth  Ave.,  McKeesport, 
PA  15132-2600  Refer  to  Job 
Order  No.  WEB206426. 


SENIOR  SYSTEMS  ADMINIS¬ 
TRATOR  (Multiple  Openings) 
Code,  test,  and  implement  client/ 
server  in  a  UNIX  environment, 
applying  knowledge  of  Shell 
Scripting.  Solstice  Backup,  CAD/ 
CAM,  Excaliber  EFS,  et  cetera; 
perform  Sun  Solaris  server 
design  and  implementation,  as 
well  as  numerous  other  applica¬ 
tion  installations  and  configuration, 
and  customer  on-site  develop¬ 
ment;  troubleshoot  and  problem 
solve  system  installations  on 
Sun  E10,  000  Servers  and  File 
Systems  including  Veritas  and 
Solstice;  and  plan  and  develop 
new  computer  systems  or  devise 
ways  to  apply  existing  systems' 
resources  to  additional  opera¬ 
tions.  Must  have  four  (4)  years 
experience  in  the  job  offered,  or 
as  a  Systems  Analyst,  Software 
Engineer,  Systems  Engineer, 
Program  Analyst,  or  related,  or 
any  suitable  combination  of 
education,  training,  and  experi¬ 
ence,  or  related.  Hrs;  8a-5p, 
M-F.  Apply  to  Moorecroft  Systems, 
Inc.,  Attn:  Neville  Saunders, 
Pres,  and  reference  ad  #EV0001 , 
202  Abbey  Court,  Alpharetta, 
GA  30004. 


CoolPlex  Developer  II:  Utilize 
CoolPlex  &  AS/400  to  plan, 
manage,  &  coord  dvlpmt  &  main¬ 
tenance  of  business  comp 
applies  prgms.  BS  in  comp  sci, 
engg,  or  related  field,  certifica¬ 
tion  by  registered  CoolPlex 
s/ware  dvlpmt  firm  in  CoolPlex, 
&  at  least  4  yrs  of  business 
application  dvlpmt  exp  reqd  for 
these  positions.  $72K  &  up. 
Resumes  to:  K  Edwards,  Rollins, 
Inc.,  2170  Piedmont  Road,  NE, 
Atlanta,  GA  30324. 


Advanced  Computing  Technolo¬ 
gies,  Inc.  is  seeking  a  F/T  Systems 
Analyst  to  design,  develop,  test, 
maintain,  and  support  internet/ 
intranet  appl.  using  Java,  PHP, 
CSS,  VB  Script,  Apache  Web 
Server,  MS  IIS,  MS  SQL,  MS 
ACCESS  etc  under  UNIX, 
WindowsNT  OS;  Maintain  and 
trouble  shoot  LAN  and  WAN 
installations;  provide  on  site 
maintenance  support  to  clients 
such  as  debugging,  modifications, 
fine  tuning  and  code  optimization. 
Require  BS  in  CS  or  Engineering 
(any  branch)  with  2  yrs  of 
relevant  exp.  Highly  competitive 
salary.  Travel  Involved.  Resumes 
to  HR,  3355  Breckinridge  Blvd. 
Suite  128,  Duluth  GA  30096. 


ABZ  CONSULTING,  Inc,  Atlanta, 
has  immediate  multiple  openings 
for  exp'ed  Prog/Analysts,  S/W 
Engineers  and  DBAs  to  develop 
S/W  applications  using  various 
H/W,  OS,  OO  mythology/princi¬ 
ples,  tools,  software  packages 
and  languages  for  data  ware¬ 
housing,  web/wireless/internet 
technologies,  CRM  implementa¬ 
tion  etc.  BS/MS  degree  req. 
Highly  competitive  salanes,  travel/ 
relocation  req.  Send  resumes  to 
3140  Briarcliff  Road,  Suite  A, 
Atlanta,  GA  30329. 


Compaq  Computer  Corporation, 
the  industry  leader  in  world¬ 
changing  technology  is  hiring  for 
all  levels  of  the  following  posi¬ 
tions  in  our  New  England,  New 
York  and  New  Jersey  facilities: 
Systems,  Software  and  Hard¬ 
ware  Engineers  and  Technical 
Consultants/ Analysts  Interested 
candidates  should  submit  resume 
to:  HR.  Compaq  Computer 
Corp.,  200  Forest  Street,  MROI- 
1/K28  Marlboro.  MA  01752  or 
contact  through  email  at 
jobs.jmm  ©  compaq.com 


SOFTWARE  ENGINEERS 
TIBURON  NETWORKS,  INC., 

a  small  Boston-area  company 
engaged  in  sophisticated  solutions 
for  the  optical-powered  Internet, 
seeks  to  fill  Software  Engineering 
positions.  Required  is  a  Bache¬ 
lor’s  degree  in  a  relevant  field 
(some  positions  require  a  Master's 
degree),  and  between  3-5  years 
relevant  experience.  Specifically: 

•  Senior  Principal  Software 
Engineer /Technical  Lead 
(Forwarding  Data  Path); 

•  Senior  Software  Engineer 
(Routing  Systems); 

Starting  salary  from  $90,000  - 
$1 40,000, 1 8  days  annual  earned 
time  off,  medical  insurance,  and 
other  industry  competitive  benefits. 
Respond  with  resume  only 
to:  Ms.  Judith  Hinkle,  Tiburon 
Networks,  Inc.,  Dept.  IMSP,  200 
Minuteman  Road,  Andover,  MA 
01810. 

Email:  IMSP@tiburonnet.com 
Fax:  (978)  933-8030  An  EOE. 


Cholan,  Inc.  is  seeking  a  Full 
time  Software  Engineer  to 
design,  develop,  test,  maintain 
and  support  internet/intranet 
appl  using  Java,  JDBC,  Servlets, 
XML,  C++,  VB,  Oracle  etc  under 
UNIX,  WindowsNT  OS;  develop 
GUIs,  write  product  documenta¬ 
tion  and  integrate  test  plans; 
provide  on  site  maintenance 
support  to  clients  such  as 
debugging,  modifications,  fine 
tuning  and  code  optimization. 
Require  BS  or  foreign  equiv  in 
CS  or  Engg  (any  branch)  with 
2  yrs  of  relevant  exp.  Highly 
competitive  Salary.  70%  travel  to 
client  sites  involved.  Resumes 
to  HR,  6209  W.  126th  Street, 
Overland  Park,  KS  66209. 
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IT  Careers  in  Healthcare 


Most  everyone  is  familiar  with  the  cost  pressures  faced  by  the  medical/  healthcare  industry.  From  government  regulations 
to  improving  access  to  and  quality  of  care,  healthcare  systems  are  turning  to  information  technology  to  enable  them  to 
work  smarter,  more  quickly  and  in  the  best  interests  of  their  patients. 


On  the  care  provider  side  are  groups 
such  as  Stellaris  Health  and  Kaiser 
Permanente  who  are  managing  systems 
and  back-up  for  physician  care  for 
literally  thousands  of  patients.  Stellaris, 
headquartered  in  White  Plains,  NY,  has 
four  hospitals  -  Lawrence  Hospital  in 
Bronxville,  White  Plains  Hospital  Center,  North¬ 
ern  Westchester  Hospital  in  Mount  Kisco  and 
Phelps  Memorial  Hospital  in  Sleepy  Hollow. 

The  health  system  brought  the  four  hospitals 
and  associated  physicians  together  two  years 
ago  and  introduced  the  first  phase  of  an  IT 
upgrade.  "IT  is  one  of  the  principal  strategies 
in  the  partnership,"  says  Michael  Pagliaro, 
Stellaris’  vice  president  for  human 
resources. The  system  introduced  HBOC 
to  standardize  the  business  systems  for 
all  four  hospitals  and  is  now  moving  into 
its  second  and  third  phases  where 
shared  clinical  information  and  lab 
information  will  be  introduced. 


To  enable  the  new  IT  design,  Stellaris 
is  hiring  systems  analysts,  project 
managers  and  business  analysts. 

"These  are  more  senior  positions,"  says 
Pagliaro.  "We  are  looking  for  people 
with  experience  in  the  systems  and  in  the 
healthcare  environment. There  is  plenty  of  lee¬ 
way  in  the  healthcare  industry  to  explore  the 
best  ways  to  do  things." 

Headquartered  in  Oakland,  CA, 

Kaiser  Permanente’s  information  technology 
organization  boasts  that  it's  one  of  the  largest  IT 


"That  means  we  continuously  search  for  talent 
in  architecture  design,  integration,  internal  web 
portal  development  and  application  develop¬ 
ment,"  says  Michael  Winkler,  marketing  manager 
for  Kaiser  Permanente’s  Information  Technology 
organization. 

The  majority  of  KP’s  jobs  are  in  California, 
with  some  regional  hiring  in  Colorado,  Ohio, 
Atlanta  and  the  mid-Atlantic  states.  "We  are 
the  best-kept  secret  in  the  IT  profession," 
Winkler  says.  "Some  of  the  things  we're  doing 
in  healthcare  are  revolutionary." 


careers 


For  more  job  opportunities  with  healthcare  firms,  turn  to  the  pages  of  ITcareer 
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On  the  retail  end  are  companies  such  as 
Walgreens  Co.,  headquartered  in  Chicago. 
Jennifer  Mote,  manager  of  IT  recruitment  at 
Walgreens,  says  the  IT  challenges  are  broad 
and  exciting.  In  addition  to  managing  the 
pharmaceutical  needs  of  literally  thousands 
upon  thousands  of  consumers,  Walgreens  has 
established  an  Intranet-based  application  that 
provides  business-critical  information  from  the 
data  warehouse  to  more  than  3,000  retail  store 
managers.  Inventory  management  systems  and 
Intercom  Plus,  a  pharmacy  application,  are 
among  the  projects  developed  and  implemented 
by  Walgreens'  more  than  700  information 
technology  employees. 


"Technology  is  a  critical  component  to 
our  operation,"  she  adds.  "We  have  high¬ 
ly  complex  IT  systems,  and  are  extremely 
innovative  in  how  we  apply  technology." 


shops  in  the  United  States. The  organization  has 
launched  a  multi-year,  groundbreaking 
project  to  implement  a  clinical  information 
system  to  support  care  delivery  to  more  than 
8.1  million  patients  worldwide. 


According  to  Mote,  the  company  offers  oppor¬ 
tunities  in  application  development,  systems 
architecture,  database  management  and  design, 
systems  administration,  network  design,  as  well 
as  the  Help  Center  to  support  the  retail  stores. 
"These  opportunities  call  upon  a  wide  variety 
of  technical  skills  such  as  JAVA,  Internet/ 
Intranet  development,  00,  Client/Server, 
ORACLE  and  AS/400  development  skills," 
says  Mote.  "Just  as  important  to  Walgreens 
are  people  who  want  to  be  part  of  our  team 
and  who  will  be  creative  about  developing  the 
next  generation  technology  solutions  for  our 
business  needs. 
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IT  Careers 
in  Atlanta 


Atlanta  has  long  been  a  growing, 
thriving  community.  Even  with  an 
economic  slide,  the  metropolitan  area 
affords  job  growth  and  opportunity  for 
information  technology  professionals. 

The  Southern  Company,  headquartered  in  Atlanta,  is  the 
Souths  largest  energy  supplier. And, while  information  tech¬ 
nology  links  the  five  Southern  Company  utilities  (Alabama 
Power,  Georgia  Power,  Gulf  Power,  Mississippi  Power  and 
Savannah  Electric),  the  company  also  uses  IT  to  power  its 


energy  trading  function,  custom  energy-related  services  and 
its  wireless  telecommunications  business.  As  the  winner  of 
JD  Power  &  Associates’  top  ranking  for  southern  utilities. 
Southern  Company  increasingly  uses  IT  to  enable 
customers  to  troubleshoot,  manage  services  and  self-serve. 

Dan  Traynor,  director  of  application  services  for 
Southern  Company,  says  information  technology  is  critical 
to  reaching  the  company’s  primary  goals  of  5%  annual  earnings 
growth  and  leadership  in  industry  customer  satisfaction. 
Customers  use  online  services  to  request  new  service,  report 
problems,  review  their  bills  and  make  payment  electronically. 
Information  Resources  will  introduce  this  year  a  new  release 
of  EnergyDirect.com,  which  assists  commercial  and  industrial 
customers  in  managing  their  energy  utilization.  Projects  under 
way  include  extension  of  online  employee  services  and  a 
cooperative  inventory  management  system  with  Southern’s 
largest  suppliers. 

Traynor  says  Southern  is  “always  on  the  lookout  for  peo¬ 
ple  with  strong  skills  in  application  development,  application 
design  and  project  management. We  want  people  with  these 
fundamental  skills.” Traynor  also  looks  for  people  who  fit  with 
the  company’s  culture,  known  as  “Southern  Style.”  “You  can 
sum  it  up  simply,”  he  says. “We  work  with  a  genuine  respect 
for  all  stakeholders,  to  include  customers,  partners,  sharehold¬ 
ers,  suppliers,  employees  and  team  workers  -  while  reaching 
for  higher  and  higher  performance. The  two  in  combination 
say  we  are  a  company  where  we  really  rely  on  one  another.” 

While  Southern  Company  has  been  part  of  the  Atlanta 
landscape  for  the  past  century,  so  too  has  been  Equifax  Inc. 
Founded  in  1899  as  Retail  Credit  Company,  Equifax  is  one  of 


the  world’s  leading  identity  authentication  services.  Equifax 
uses  its  IT  resources  to  support  global  commerce,  bringing 
together  buyers  and  sellers  through  information  management, 
consumer  credit  systems,  authentication  and  e-commerce 
capabilities. The  company  holds  a  patent  for  its  elDverifier 
product,  used  to  authenticate  individuals  on  the  Internet.The 
company  also  offers  Credit  Watch,  which  allows  consumers  to 
protect  their  identity  and  financial  health. 

Katherine  Crew,  vice  president  for  Equifax  human 
resources,  says  the  company  uses  a  combination  of  legacy  and 
leading-edge  systems. "We  continuously  enhance  our  systems 
and  re-engineer  processes  around  our  products,"  she 
explains. "Our  core  credit  file  was  written  in  Assembler  and 
we  work  to  enhance  its  data  quality.  At  the  same  time  that 
we  need  these  relatively  old  skills,  we  also  need  individuals 
with  JAVA  and  C++  skills.”  Because  Equifax  has  a  strong 
cultural  focus  on  learning,  the  company  assures  that  those 
bringing  the  more  dated  skills,  such  as  Assembler,  also  have 
the  opportunity  to  receive  training  in  new  technologies. 

Crew  says  the  company  hires  those  with  solid  program¬ 
ming  abilities,  as  well  as  those  with  skills  in  test  and  business 
analysis. “We  also  look  for  people  with  business  acumen,  who 
can  determine  the  technologies  that  will  help  us  achieve 
business  needs,"  she  says.  “We  look  for  people  based  on  what 
they  can  do  today,  but  also  for  their  potential.” 

For  more  job  opportunities  with  firms  in  Atlanta,  turn  to  the  pages  of  ITcareers. 

•  If  you'd  like  to  take  pari  in  an  upcoming  ITcareers  feature,  contact 
Janis  Crowley,  650.312.0607  or  janis_crowley@itcareers.net. 
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•  Designed  by  Aldebaran  Graphic  Solutions 


Make  a  turning  point  in  your  career  with  an 
internationally -recognized  cancer  center 
where  technological  advances  and  career 
satisfaction  are  " Making  Cancer  History .” 
Continuing  our  impressive  record  of  growth 
and  development ,  UT  M.  D.  Anderson  Cancer 
Cen  ter  is  currently  seeking  IT  professionals  for 
the  folloiving  positions: 

Applications  Systems  Analyst  -  BS 

in  Computer  Science  or  related  field;  3  yrs. 
analysis/design/project  management/ 
programming  exp.;  2  yrs.  hands-on 
PeopleSoft  HR,  Payroll,  technical 
development  exp. 

Business  Process  Consultant  -  Bachelor  s  in 
Computer  Science  or  related  field;  3  yrs.  systems 
process  analysis  and  design  exp.;  Healthcare  IS 
Implementation  exp. 

Business  Systems  Analyst  -  BS  in  Computer 
Science  or  related  field;  3  yrs.  project  management 
and/or  workflow  analysis  exp.  Will  function  as  a 
project  technical  consultant  for  AEMR  team. 
Business  Systems  Analyst  -  BS  in  Computer 
Science  or  related  field;  3  yrs.  project  management 
and/or  workflow  analysis  exp.;  2  yrs.  hands-on 
PeopleSoft  HR,  Benefits  and  Payroll  exp. 

Sr.  Security  Analyst -Bachelor's  in  relevant  field; 
3  -  4  yrs.  computer  security  experience.  Top  Secret 
security  exp.  preferred. 

M.  D.  Anderson  offers  a  competitive  salary  and 
comprehensive  benefits  package.  Qualified 
candidates  are  invited  to  e-mail  resumes  to: 

rjjordan@mdanderson.org  or  mail  to:  R.  Jordan, 
1 51 5  Holcombe  Blvd.,  Box  205,  Houston,  TX  77030. 

Reference  code  IDG1001  when  applying.  EEOE, 
Smoke-tree  environment. 


TTE  LNIVEBSITY  OF  TEXAS 

ML)  AN  PERSON 

CANCER  CENTER 


Every  day  hiring  managers 
turn  to  ITcareers.com  for 
the  best  IT  candidates.They 
know  us  and  they  know  we 
can  deliver. 


If  you  want  a  better  challenge, 
we  challenge  you  to  find  a  better 
IT  career  site  thanlTcareers.com. 
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Tripwire  prevents  tampering  in  routers,  switches 


■  BY  ELLEN  MESSMER 

PORTLAND,  ORE.  —  Tripwire  today  is 
unveiling  a  management  console  de¬ 
signed  to  prevent  unauthorized  changes  to 
Cisco  Catalyst  switches  and  routers  by  noti¬ 
fying  network  managers  of  tampering  and 
automating  restoration  to  original  settings. 

Available  for  Windows  NT  or  Unix,  the 
Tripwire  for  Routers  and  Switches  console 
software  is  best  placed  within  the  opera¬ 
tions  center  where  network  monitoring 
takes  place,  says  Dwayne  Melancon, 
Tripwire’s  vice  president  of  marketing.  Each 
console  can  monitor  up  to  1,000  switches 
and  routers,  detecting  an  unauthorized 
change  to  routing  and  configuration 


tables,  immediately  notifying  the  manager 
via  e-mail  or  page  alert. 

Unauthorized  changes  can  occur  when 
systems  administrators  inadvertently  or 
purposefully  alter  router  or  switch  configu¬ 
ration  settings  ordered  by  the  manager  in 
charge.  Malicious  hacking  might  be  the 
culprit,  Melancon  notes,  but  more  often 
network  outages  change  router  and  switch 
configuration. 

Because  misconfiguration  can  cause 
major  disruptions  to  network  operation,  it’s 
important  to  be  apprised  of  these  incidents 
and  take  steps  to  restore  the  original  set¬ 
tings  right  away.  And  that’s  what  the 
Tripwire  console  software  —  which  costs 
$5,000  with  an  additional  $250  for  each 


monitored  router  or  switch  —  tries  to  do. 

Tripwire  came  out  with  an  earlier  version 
of  this  product  supporting  only  routers. 
Deutsche  Bank,  which  had  some  problems 
with  systems  administrators  overriding  the 
wishes  of  the  security  manager,  has  been  a 
customer  and  a  contributor  to  the  Tripwire 
design.  With  this  latest  version,  Tripwire  ful¬ 
fills  its  promise  to  prevent  switch  tampering. 

The  product  is  catching  the  eye  of  corpo¬ 
rations  that  say  the  Tripwire  monitoring 
tool  is  the  only  one  they’ve  seen  that  has 
the  capability  to  notify  a  manager  when  an 
unauthorized  change  is  made. 

“Change  management  and  validation  is 
very  important,”  says  Ozzie  Kuscan,  net¬ 
work  manager  at  Lonza  Group, a  chemicals 


manufacturing  company  that  supplies 
pharmaceutical  giants  such  as  Pfizer  and 
Novartis.  “The  Tripwire  tool  could  be  of 
help  in  documenting  changes.” 

Lonza,  based  in  Basel,  Switzerland,  with 
U.S.  headquarters  in  Fairlawn,  N.J.,  has  a 
frame  relay  network  connecting  10  offices, 
and  it  maintains  its  own  routers.  Chemical 
manufacturing  is  a  tightly  regulated  indus¬ 
try,  and  the  Food  and  Drug  Administration 
and  Lonza’s  own  pharmaceutical  cus¬ 
tomers  periodically  conduct  security 
audits  of  its  network,  Kuscan  says.  The 
Tripwire  tool  appears  to  add  to  the  “good 
practices”  regulations  expected  in  these 
audits,  he  says. 

Tripwire:  www.tripwire.com 
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plan  future  storage  capacity. 
Patrol  ASRM  also  provides  dis¬ 
covery  and  management  sup¬ 
port  for  host  bus  adapters,  and 
support  for  more  Fibre  Channel 
switches,  Sybase,  Microsoft  Ex¬ 
change  and  Siebel  Systems 
applications,  and  a  wider  variety 
of  storage  resource  reports. 

•  Computer  Associates  is  pro¬ 
mising  enhancements  to  its 
BrightStor  storage  platform  early 
next  year  that  will  include  SAN 
management  software  and  enter¬ 
prise  storage  management  soft¬ 
ware.  The  goal  of  CAs  BrightStor 
is  to  manage  any  direct-,  net¬ 
work-  and  SAN-attached  storage 
from  any  vendor. 

While  welcoming  the  trend 
toward  open  management  sys¬ 


tems,  analysts  and  users  are  wary 
of  whether  the  tools  will  be  used 
any  more  efficiently  than  sys¬ 
tems  management  products 
from  the  likes  of  Tivoli  Systems/ 
IBM  or  CA. 

“If  I  could  use  one  tool  kit  to 
manage  all  my  storage  in  totality 
and  optimize  my  storage  pool, 
that’s  great,”  says  Gibbs,  who  has 
Compaq  StorageWorks,  EMC  and 
Network  Appliance  storage.  “All 
my  CIO  wants  to  hear  now  is 
how  I  am  going  to  cut  my  budget 
or  increase  our  revenue.  If  I  can 
go  to  my  CIO  and  say, ‘Let’s  hold 
off  on  buying  $50,000  of  storage 
because  I  have  this  $10,000  tool,’ 
that  makes  an  excellent  case.” 

But  these  frameworks  may  well 
be  easier  hyped  than  executed, 
others  warn. 

“If  these  management  tools 
require  a  lot  of  heavy  lifting,  it 


will  become  shelfware,”  says 
James  Gruener,  an  analyst  with 
The  Yankee  Group.  “If  it  is  too 
hard  to  use,  the  user  is  going  to 
say  T  have  better  things  to  do.’” 

EMC  executives  are  confident 
their  announcement  this  week 
points  them  in  the  right  direc¬ 
tion.  The  components  being 
released  are: 

•  WideSky,  middleware  that  will 
ship  in  the  fourth  quarter  and  lets 
software  and  hardware  vendors 
integrate  their  applications  and 
products  with  EMC’s  Enterprise 
ControlCenter/Open  Edition. 

•  StorageScope,  a  utility  avail¬ 
able  in  November,  which  gathers 
utilization  information  from  stor¬ 
age  devices,  consolidates  the 
information  into  a  single  set  of 
reports  and  lets  IT  set  thresholds 
for  allocation  of  storage. 

•  Replication  Manager,  avail¬ 
able  now,  is  a  software  compo¬ 
nent  that  lets  IT  standardize  and 
automate  the  replication  and 
restoration  of  data.  Replication 
Manager  supports  EMC  Sym- 
metrix  arrays.  The  company  will 
offer  full  feature  parity  with  Com¬ 
paq’s  StorageWorks  gear  early 
next  year. 

The  browser-based  Enterprise 
ControlCenter/Open  Edition  also 
wisely  bundles  software  that  IT  is 
familiar  with,  such  as  EMC’s 
TimeFinder  and  Symmetric  Re¬ 
mote  Data  Facility,  making  adop¬ 
tion  easier,  Gruener  says. 

In  addition  to  ease-of-use 
questions  on  the  customer  end, 
analysts  cite  concerns  about 
these  open  management  frame¬ 
works.  Because  these  packages 
will  work  with  any  vendors’ 
hardware  or  software,  there  is 
the  risk  of  commoditizing  the 
hardware,  thus  alienating  devel- 
opers.The  second  —  and  bigger 
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60% 

of  enterprise  IT 
managers  expect  to 
spend  money  on  storage 
management  in  the  next 
year,  according  to  an 
AFCOM  Data  Center 
Institute  study. 


concern  —  is  that  there  are  few 
existing  standards  or  industry- 
standard  APIs  that  let  storage 
hardware  and  software  work 
together. 

“Every  vendor  has  its  own  pro¬ 
prietary  approach,  APIs  and 
point  products  that  solve  a  par¬ 
ticular  problem  and  have  to  be 
integrated  in  a  specific  fashion. 
The  Storage  Network  Industry 
Association  should  define  APIs 
for  discovery,  data  virtualization, 
backup  and  recovery/’  Gruener 
says. 

Although  EMC  declined  to 
comment  on  the  APIs  that 
WildSky  uses  other  than  to  say 
they  are  based  on  the  company’s 
4-year-old  E-Infostructure  Devel¬ 
opers  Program,  several  sources 
indicated  they  are  EMC-specific. 
The  APIs  in  Hitachi’s  Hi- 
Command  also  are  proprietary. 

EMC’s  Enterprise  ControlCen¬ 
ter/Open  Edition  components 
are  available  priced  by  capacity 
For  instance,  if  a  customer  has  14 
terabytes  of  data,  StorageScope 
would  cost  $50,000.  The  Control- 
Center  Console  is  included  in 
that  cost.  Hitachi’s  and  BMC’s 
products  are  also  based  on  tera¬ 
byte  capacity  ■ 
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others,  but  .Net  solved  our  data¬ 
base  driver  and  caching  needs.” 

What  about  Sun? 

While  Microsoft  entertained 
7,000  developers, Sun  held  a  one- 
day  summit  up  the  road  in  Santa 
Clara  to  unveil  components  of  its 
SunOne  architecture,  a  compet¬ 
ing  platform  to  .Net. 

The  most  significant  develop¬ 
ment  was  that  Sun  made  avail¬ 
able  its  SunOne  Starter  Kit, 
which  includes  all  the  infra¬ 
structure  products  and  tools 
needed  to  build  and  run  Web 
services,  or  what  it  calls  Services 
on  Demand.  The  kit  includes 
Forte  for  Java  3.0,  a  develop¬ 
ment  tool;  the  iPianet  Appli¬ 
cation,  Web,  Portal,  Directory 
and  Unified  Development  Serv¬ 
ers;  and  the  latest  Java  Software 
Development  Kit. 

“Sun  hasn’t  shown  a  lot  of  inte¬ 
gration,”  says  Gary  Hein,  an  ana¬ 
lyst  with  The  Burton  Group. “They 
are  taking  a  page  from  .Net  and 
trying  to  put  together  an  infra¬ 
structure  that  is  integrated  and 
not  cobbled  together” 

Sun  also  unveiled  an  Instant 
Collaboration  Pack  focused 
around  instant  messaging  for  the 
iPianet  Fbrtal  Server,  standards 
support  around  Java  APIs  for 
XML,  and  a  set  of  consulting 
services. 

The  rollout  was  just  the  first 
phase  of  a  two-year,  three-phase 
attack.  The  second  phase  next 
year  deals  with  creating  Serv¬ 
ices  on  Demand  for  use  within 
a  corporation,  while  the  third 
phase  focuses  on  integrating 
publicly  available  Services  on 
Demand  ■ 


These  vendors  have 
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frameworks  more  interoperable  with 

the  systems  and  applica¬ 
tions  listed  here. 


Hitachi  Data  Systems’  HiCommand 

yV,  Storage  systems  —  Hitachi  Lightning  9900  and  Thunder  9200, 

Sun  StorEdgeT3  and  9900 

•’’v- -» 

IMC’s  Enterprise  ControlCenter/Open  Edition 

—  Oracle,  DB2,  MVS 

systems — Tru64  Unix,  AIX,  MVS,  NetWare, Windows 


'.  -•rS/Ws  -^Brocade,  EMC,  McData,  QLogic 

stems  —  Compaq,  HP,  Hitachi/Sun,  IBM,  JBOD 

BMC’s  Patrol  Application  Storage  Resource  Manager 

—  Sybase,  Microsoft  (Exchange),  Siebel 

SWts —  Agilent,  Emulex,  JNI,  QLogic,  Inrange 
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that  home  PCs  for  employees 
were  not  critical.  Ford  announced 
that  it  was  officially  scrapping  the 
ambitious  program  it  launched  in 
February  2000  to  give  its  roughly 
300,000  employees  a  PC,  printer 
and  home  Internet  access  at  the 
cut-rate  price  of  $5  per  month 
(www.nwfusion.com,  DocFinder 
6679). When  the  program, dubbed 
Model  E,  was  announced,  it  was 
hailed  as  a  breakthrough  in  the 
way  companies  would  do  busi¬ 
ness  in  the  new  Internet  economy 

Today,  the  programs  demise  is 
an  illustration  of  how  the  uncer¬ 
tain  economy  is  causing  a  shift  in 
IT  priorities. 

“Companies  are  pushing  re¬ 
sources  they  have  to  systems  that 
are  essential  for  their  organiza¬ 
tions  to  keep  growing  and  for 
them  to  remain  competitive," says 
Brooks  Gray,  an  analyst  with  Tech¬ 
nology  Business  Research. 

“When  you’re  unsure  whether 
your  corporate  headcount  is 
going  to  be  cut  5%  or  10%  over  a 
two-  to  three-month  time  frame, 
you’re  not  focused  on  providing 
all  these  extra  incentives  to  your 
employees,"  he  says. “You’re  work¬ 
ing  on  streamlining  the  opera¬ 
tions,  achieving  a  more  efficient 
business  model  and  cutting  your 
expenses.” 

While  Ford  is  the  first  company 
to  announce  an  end  to  a  major 
PC  giveaway  program, analysts  ex¬ 
pect  others  to  follow  suit.  They 
note  many  corporations  offered 
PCs,  cell  phones,  pagers  and 
other  devices  as  lures  to  get  and 
keep  good,  quality  staff. The  com¬ 
petitive  need  for  those  perks  has 
eroded  as  the  number  of  layoffs 
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has  increased. 

“Companies  are  definitely  scrut¬ 
inizing  costs,”  says  Randy  Giusto, 
vice  president  at  market  re¬ 
searcher  IDC.“If  you  take  a  look  at 
some  of  these  [PC  giveaway]  pro¬ 
grams  ...  1  would  think  that’s  one 
of  the  things  that  would  probably 
be  the  first  to  go,  or  at  least  would 
be  scrutinized  quite  heavily” 

However,  at  the  same  time  the 
San  Francisco  firm  that  coordi¬ 
nated  the  Ford  program  (and  re¬ 
ceived  $6.6  million  from  the  auto- 


Pulling  the  plug 

Before  scuttling  the 
program  last  week,  Ford 
had  parceled  out 

166,000 

PCs  to  its  employees 
for  home  use. 


maker  for  the  broken  contract) 
claims  that  it  is  conducting  busi¬ 
ness  as  usual.  PeoplePC  continues 
to  support  the  166,000  Ford  em¬ 
ployees  who  have  already  re¬ 
ceived  PCs,  and  has  announced 
new  deals  recently  including  a 
program  with  Ingersoll-Rand  to 
provide  PCs  and  Internet  connec¬ 
tivity  to  50,000  current  and  retired 
employees.There  are  programs  in 
progress  with  companies  such  as 
Delta  Airlines  and  Vivendi  Univer¬ 
sal  that  continue  on  track,  a  Pe¬ 
oplePC  spokeswoman  says. 

Other  computer  vendors  say 
their  employee-purchase  pro¬ 
grams  are  going  smoothly.  For 
example,  Dell  says  it’s  getting  in¬ 
creased  interest  from  businesses 
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looking  for  new  ways  to  provide 
benefits  to  employees.  An  em¬ 
ployee-purchase  program  it’s  run¬ 
ning  for  American  Airlines  is  con¬ 
tinuing  uninterrupted  with  75,000 
computers  already  ordered. 

One  thing  that’s  not  clear, 
though,  is  exactly  how  much  cor¬ 
porations  are  paying  for  the  em¬ 
ployee  PC  packages,  a  considera¬ 
tion  that  obviously  would  make  a 
difference  as  to  whether  a  pro¬ 
gram  stays  or  goes. 

So  while  the  situation  hasn’t 
come  to  ripping  home  PCs,  cell 
phones  and  pagers  out  of  the 
hands  of  workers  —  Research  In 
Motion,  a  wireless  device  manu¬ 
facturer,  says  the  “vast  majority”  of 
its  products  are  still  purchased  by 
businesses  for  their  employees  — 
analysts  agree  there  is  an  in¬ 
creased  scrutiny  on  how  those 
items  are  used  and  paid  for. 

Yankee  Group’s  Kerravala  says 
a  consulting  firm  he  worked  at 
previously  changed  its  policy  on 
cell  phones  as  the  economy 
soured. 

“When  1  got  there,  the  com¬ 
pany  paid  for  your  cell  phone. 
You  never  even  saw  the  bill,”  he 
says.  “What  they  moved  to  was 
the  employee  got  his  own  cell 
phone  and  then  submitted  the 
bill  to  get  reimbursed  for  calls 
that  were  business-related.  That 
stopped  people  from  abusing 
the  privilege.” 

Ulrich  Seif, CIO  at  National  Semi¬ 
conductor,  says  technology  pur¬ 
chases  are  kept  under  control  at 
his  company  by  making  sure  they 
all  are  ultimately  signed  off  on  by 
him.  Employees  that  need  cell 
phones  to  do  their  jobs,  such  as 
sales  executives  and  IT  support 
staff,  get  them  from  the  company 
PDAs  are  also  available  to  those 
who  decide  they  need  them. 

“But  common  sense  prevails, 
and  in  this  economic  climate  I 
have  yet  to  see  an  order  for  a 
PDA,”  he  says.  “National  was 
founded  in  1959  ...  so  we  have 
seen  the  ups  and  downs  quite 
often,  we  also  have  a  solid  con¬ 
tingent  of  longtime  employees. 
All  of  this  has  created  an  individ¬ 
ual  sense  of  fiscal  responsibility’ 

Barbara  Gomolski,  a  research 
director  at  Gartner,  says  she  has 
seen  cuts  come  more  in  the  area 
of  monetary  bonuses  than  in  IT 
perks,  but  wouldn’t  be  surprised 
to  see  companies  pull  back  on 
such  IT  extras. 

“Such  incentives  are  discre¬ 
tionary,  and  discretionary  spend¬ 
ing  on  IT  has  been  hit  hard  by  the 
events  of  Sept.  1  l,”she  says.  ■ 

Get  more  information  online. 
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ed,  and  non-IBM  platforms  will 
still  be  offered. 

Nortel  says  it  has  tested  Sym¬ 
posium  on  IBM’s  Intel-  and 
Windows-based  servers  and  has 
given  its  stamp  of  approval  for 
Symposium  to  run  on  IBM’s  eSer- 
ver  xSeries  products. 

The  Marketing  Store,  a  Toronto 
marketing  firm,  has  used  Sym¬ 
posium  for  the  last  year  to  run  its 
customer  contact  center,  which 
serves  clients  such  as  McDon¬ 
alds  USA,  Nissan  Canada  and  In¬ 
finity  Canada. 

Julie  Card,  manager  of  contact 
center  operations,  says  the  Nor- 
tel-IBM  pact  “could  be  beneficial 
to  us  as  a  Nortel  customer  be¬ 
cause  it  expands  the  kinds  of  pro¬ 
ducts  they’ll  have  to  offer.” 

While  Card  plans  to  keep  Sym¬ 
posium  on  Microsoft  SQL  Server, 
she  foresees  her  firm  going  with 
IBM  Global  Services  for  future 
call  center  rollouts. 

In  addition  to  working  with  IBM 
on  hardware  and  software  inte¬ 
gration,  Nortel  has  named  IBM  its 
preferred  integrator  for  installing 
Nortel  enterprise  voice-over-lP 
products,  such  as  Succession 
Communication  Server  for  En¬ 
terprise  (CSE)  IP  PBX,  which  sup¬ 
ports  640  IP  phones;  Business 
Communication  Manager  (BCM) 
small-office  IP  PBX;  and  i2004  line 
of  IP  telephones. 
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This  move  could  signal  a  shift 
for  Nortel  in  terms  of  how  it  sells 
telephony  and  call  center  prod¬ 
ucts.  Traditionally,  Nortel  has 
teamed  with  integration  compa¬ 
nies  such  as  Williams  Telecom¬ 
munications  Systems  to  sell  and 
install  PBXsand  call  centers.  IBM 
is  a  more  IP-  and  datacom-ori- 
ented  integrator. 

But  Eric  Ross,  president  of  Nor¬ 
tel’s  enterprise  solutions, says  this 
is  not  a  shift  in  how  the  company 
will  deploy  voice  products. 

“IBM  simply  becomes  another 
vehicle  to  move  IP  telephony?’ 
he  says. 

However,  Ross  points  out  IBM 
Global  Services  has  a  well-trained 
IP  force  and  the  company’s  expe¬ 
rience  in  deploying  IP  networks 
was  a  factor  for  choosing  IBM. 

Ross  says  Nortel  is  also  looking 
into  migrating  other  voice-over-IP 
server-based  products  —  such  as 
the  Windows  Server-based  Suc¬ 
cession  CSE  and  BCM  —  to  IBM’s 
Wintel  server  products.  He  would 
not  say  if  such  a  move  was  defi¬ 
nitely  in  the  works. 

The  Nortel/IBM  partnership  is 
similar  to  a  deal  made  two 
weeks  ago,  in  which  IBM  agreed 
to  integrate  voice-over-IP  prod¬ 
ucts  from  Cisco,  and  Cisco,  in 
turn,  certified  its  CallManager  IP 
PBX  software  to  run  on  IBM’s 
eSeries  xServer  products. 

Nortel:  www.nortel.com;  IBM 
Global  Services:  www-l.ibm.com/ 
services/ 


a  measurable  return  on  investments? 

Our  budget  is  being  more  than  doubled  this  year  and  next. We  didn’t 
have  the  money  for  the  two  networks.  Thanks  to  Secretary  Fbwell, 
Undersecretary  [for  Management]  Grant  Green  and  Congress,  they 
gave  us  $110  million  to  do  the  OpenNet  Plus  project.  We  had  the 
money  to  do  the  pilot,  and  we  were  doing  that  as  the  secretary  came 
on  board.  We  didn’t  have  the  money  to  roll  it  out.  It  was  the  same  way 
with  the  $200  million  for  the  classified  LANs.  It  would  have  taken  us  five 
to  10  years  at  the  pace  we  were  going  with  little  bits  of  money  every 
year. 

How  do  we  make  sure  the  money  is  spent  wisely?  We’ve  put  out 
competitive  bids.  We  have  professional  contractors  working  with  us 
such  as  KPMG,  Computer  Sciences  Corp.,  Electronic  Data  Systems, 
Gartner  and  others.  They’re  all  working  .on  different  parts  of  the  pro- 
ject.They  are  ensuring  that  we’re  using  the  latest  techniques, the  most 
cost-effective  techniques.  And  we’ve  used  governmentwide  acquisi¬ 
tion  contracts  [for  purchasing  hardware]  to  be  the  most  competitive. 

What  lessons  can  corporate  network  executives  learr.  about  network  secu¬ 
rity  from  your  experiences  at  the  State  Department? 

They  ought  to  look  at  combining  networks.  Originally,  our  unclassi¬ 
fied  [Web  access]  and  sensitive  but  unclassified  [OpenNet]  networks 
were  going  to  be  separate.  Corporations  [tend  to]  have  separate  net¬ 
works.  All  the  hardware,  the  software,  the  routers,  the  telecommunica¬ 
tions  lines  —  everything’s  duplicated, so  it  requires  more  money  and 
more  people.  If  you  can  combine  the  two  networks  properly  and  not 
give  up  security,  you  can  save  a  lot  of  money  and  [manage  with 
fewer]  people.  ■ 
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Mark  Gibbs 


The  new  battleground 


G 


iven  that  the  mood  of  the  coun¬ 
try  is  at  an  all-time  low,  it  would 
be  a  reasonable  guess  that  real- 
world  retail  sales  will  be  rather  flat 
this  holiday  season. 

As  evidence,  allow  me  to  submit 
that  the  consumers  I  have  talked  to  (my  wife, our 
friends)  are  adamant  that  a  trip  to  the  dentist  is 
more  appealing  than  going  to  the  mall. 

In  part,  this  feeling  is  driven  by  concerns  about 
personal  safety,  but  there’s  a  general  feeling  of  gloom 
that  also  makes  traipsing  around  stores  unappealing. 
And  somehow,  publicly  indulging  in  consumerism 
just  feels  wrong  —  rather  like  dancing  at  a  funeral. 

The  majority  of  us  aren’t  going  to  cancel  Christmas 
and  as  a  consequence  of  not  wanting  to  go  out, 
many  of  us  will  shop  online.  Even  though  prior  to 
Sept.  1 1  we  could  have  predicted  an  increase  in 
online  spending,  we  can  now  be  certain  the  in¬ 
crease  will  be  more  significant. 

But  there  are  risks  in  the  offing.  As  we  all  know, 
e-commerce  is  still  a  relatively  new  field  and  many 
of  the  vendors  are,  to  be  nice,  extremely  naive  in 
their  security  and  site  management,  while  many 
users  are  complete  newbies.This  is  a  perfect  envi¬ 
ronment  for  bad  people  to  do  bad  things. 

What  might  a  terrorist  do?  He  won’t  go  for  the  big 
targets  such  as  knocking  over  www.whitehouse.gov, 


www.fbi.gov  or  www.cia.gov.  Not  only  are  they  too 
well  defended  (unless  of  course, you  are  a  13-year- 
old  hacker  from  Peewaukee),  there’s  not  much  of  a 
terrorist  impact  in  doing  so. 

I’d  suggest  that  more  likely  targets  are  commercial 
entities  such  as  landsend.com,  fingerhut.com  and 
the  like.  And  maybe  the  terrorists  wouldn’t  just  blast 
these  sites  off  the  ’Net.  Perhaps  they  will  be  more 
devious  and  look  to  exploit  the  weaknesses  in  these 
company’s  servers. 

And  weaknesses  in  e-commerce  systems  are  every¬ 
where.  For  example,  despite  the  gallons  of  ink  regard¬ 
ing  vulnerabilities  in  Microsoft’s  Internet  Information 
Service  (the  Windows  NT  Web  server),  a  huge  num¬ 
ber  of  sites  are  still  vulnerable. 

So  the  terrorists  start  grabbing  credit  card  data  and 
within  5  minutes  of  you  placing  your  order  for  a  new 
sweater  for  Auntie  Flo  with  sweatersrus.com, your 
card  is  working  overtime  buying  high-ticket  electron¬ 
ics  and  Armani  suits  in  Berlin. 

And  notice  how  poor  the  response  from  that  site 
is?  Is  it  really  slow  or  is  someone  mounting  a 
denial-of-service  (DoS)  attack  with  just  enough  vol¬ 
ume  to  degrade  performance  but  not  enough  to 
stop  service? 

This  is  the  kind  of  assault  that  could  wear  down 
our  belief  in  the  importance  of  the  Internet.  Online 
vendors  will  spend  money  unnecessarily  on  bigger 


pipes, consumers  will  get  frustrated  and  reduce  their 
buying,  insurance  claims  will  go  up, credit  card  com¬ 
panies  will  waste  time  and  money  solving  fraud,  and 
retailers  will  lose  business  and  profits  in  the  process. 

And  why  would  terrorists  do  any  of  this  rather  than 
their  real-world  attacks? To  begin  with,  real-world 
attacks  are  expensive,  complex  and  difficult,  while 
attacks  mounted  online  are  cheap,  relatively  simple 
and  safe  for  the  perpetrators. 

Even  more  importantly,  the  Internet  is  a  huge,  visi¬ 
ble  symbol  of  capitalism  and  American  influence. 
Degrading  its  value  to  our  culture  and  damaging  its 
role  in  our  business  affairs  would  have  as  much  of 
an  impact  as  killing  off  broadcast  television  or  shut¬ 
ting  down  Hollywood. 

So  what  are  you  going  to  do  about  it?  Have  you 
audited  your  systems  to  make  sure  that  all  the  rele¬ 
vant  patches  have  been  applied  internally  and  at  the 
corporate  edge?  Can  you  detect  attacks  such  as  DoS 
and  do  you  know  how  to  respond? 

Fighting  terrorism  is  as  much  about  being  pre¬ 
pared  and  having  the  right  weapons  to  respond  as  it 
is  about  attitude  —  being  ready  and  willing  to  go  to 
battle.  And  the  ’Net  and  your  presence  on  it  are  part 
of  the  new  battleground. 

Let's  talk  about  what  you're  doing  at  nwcolumn 
@gibbs.  com. 
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Paul  McNamara 

If  you  were  a  GuruNet  fan . . . 

Your  typical  desk-bound  employee  spends  a  half- 
hour  a  day  rummaging  for  information  in  various 
company  data  repositories  —  often  blindly  and  with 
lousy  results,  say  those  who  measure  such  behavior. 

(Pop  quiz:  People  who  work  in  sales  spend  most  of 
that  time  looking  for  a  particular  type  of  information. 
What  is  it?  . . .  Answer  below.) 

Bob  Rosenschein,  founder  of  Atomica  —  known  as  GuruNet  until  a  year  ago  — 
promises  that  his  company's  client/server  software  can  shorten  that  half-hour  con¬ 
siderably  and  make  what  time  is  left  more  productive.  Having  learned  the  hard  way 
that  critical  acclaim  can't  support  a  business  unless  someone  pays  the  bills,  Atom¬ 
ica  is  shaking  off  the  vestiges  of  its  consumer-oriented  past  to  pitch  “answer  deliv¬ 
ery"  technology  to  corporate  America. 

At  exactly  the  wrong  time,  unfortunately,  but  that  doesn’t  seem  to  bother  Atomica. 
The  company  this  week  will  release  "Atomica  for  Sales  and  Marketing,”  as  well  as 
announce  a  bundling  agreement  with  Lotus. 

"We  are  not  a  search  engine,”  Rosenschein  emphasizes.  Instead  the  software  lets 
iser s  click  on  a  word  in  a  document  —  say  Gates  —  then  sit  back  as  all  of  the  rele- 
.  ;  it  information  within  the  organization  is  brought  forward  in  an  easily  navigable 
'tor  ace.  Outside  sources  can  also  be  tapped.  The  product  figures  out  from  context 
s,  William  H.,  or  gates,  pearly. 

inges  on  convincing  cash-strapped  IT  buyers  that  reclaiming 
^effective  searches  is  worth  the  price  of  another  software 


j  to  do  more  with  less,"  Rosenschein  counters,  so 
itageous.  Atomica  Enterprise  costs  $1.25  per 
y  claims  customers  can  recoup  that  investment 
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through  productivity  gains  within  10  months. 

(Quiz  answer:  Information  about  their  commissions,  of  course.) 

What  kind  of  fools  does  Microsoft  hire? 

Did  you  catch  author  Mark  Goldblatt's  hilarious  column  about  Microsoft  Word  in 
last  Tuesday’s  New  York  Times?  It  seems  Bill  Gates’  minions,  in  their  infinite  wisdom, 
decided  that  the  thesaurus  feature  in  the  word  processor  needed  a  cleansing  prior 
to  its  latest  release. 

Goldblatt  recounted  his  attempt  to  use  the  Word  2000  thesaurus  to  find  a  synonym 
for  a  four-letter  word  beginning  with  “f”  —  "fool,"  not  that  other  one.  The  thesaurus 
came  up  empty,  offering  not  a  single  alternative:  nary  a  ninny,  nincompoop,  nor 
numbskull.  This  prompted  Goldblatt  to  ask  Microsoft  what  gives.  Here's  the  reply  he 
got  from  a  spokesperson: 

“Microsoft's  approach  regarding  the  spell  checker  dictionary  and  thesaurus  is  to 
not  suggest  words  that  may  have  offensive  uses  or  provide  offensive  definitions  for 
any  words.  The  dictionary  and  spell  checker  is  updated  with  each  release  of  Office 
to  ensure  that  the  tools  reflect  current  social  and  cultural  environments.” 

Reflect  whose  social  and  cultural  environments?  The  Taliban's? 

Perhaps  this  is  naive,  but  I'm  presuming  that  the  world’s  most  famous  high-tech 
honcho  did  not  play  an  active  roll  in  the  wimpification  of  Word.  He’s  a  busy  fellow 
and  tracking  a  word  processor  is  probably  not  high  on  his  list.  So  if  I'm  Bill  Gates, 
here’s  what  I  do  after  reading  Goldblatt’s  column: 

I  call  my  vice  president  in  charge  of  the  Office  suite  and  ask  if  he  had  prior  knowl¬ 
edge  that  the  thesaurus  was  being  neutered  in  the  name  of  political  correctness. 

If  the  answer  is  yes,  I  fire  the  dimwit  for  being  a  dunderhead. 

If  the  answer  is  no,  I  tell  the  VP  to  find  the  highest-ranking  imbecile  who  approved 
the  decision  and  fire  that  blockhead  for  gross  incompetence. 

Only  then  do  I  can  the  VP  for  suffering  such  a  fool  on  his  staff. 

Seriously,  Bill,  make  ’em  put  the  thesaurus  back  the  way  it  was. 

Call  me  any  name  you  want.  The  address  is  buzz@nww.com. 
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etwork  Security 


It's  not  just  VPNs 


It's  not  just  firewalls 


It's  not  just  Intrusion  Detection 


John  J.  Roese 

SVP,  Chief  Technology  Officer,  Enterasys  Networks 


John  is  the  visionary  behind  Enterasys'  holistic  security  solutions,  which  combine 
best-of-breed  products  and  technologies  with  comprehensive  service  offerings  for  a  secure, 
end-to-end  infrastructure  that  delivers  something  more— peace  of  mind. 
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An  active  member  of  the  IEEE,  IETF  and  other  standards  bodies,  John  is  also  co-author  of  the 
recent  IEEE  802.1  x  Port-Based  Network  Access  Control  Standard. 
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«5»hn‘s  \/ision  is  fully  realized  in  the  secure,  highly  available  and  mobile  networks  of  Ferrari  S.P.A., 
SMu^ill  Lynch,  St.  John's  Hospital,  Wake  Forest  University  and  Motorola. 

W^pan  do  the  same  for  you.  Call  877-423-8074  or  visit  the  web  at  enterasys.com. 
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£Rt  l  Network  Security  Webcast 


Sponsored  by  NetworkWorld  and  Enterasys  Networks  •  Wednesday,  Nov.  14  •  1 :00  p.m.  (EST) 


!  • ; '  NetworkWorld's  John  Callant,  John  Roese,  and  an  information  security  expert  as  we  address  the  latest  technologies  and  techniques 

to  safeguard  your  business  from  the  next  wave  of  cyber-terrorism. 

1  r  more  information  and  to  register,  please  visit  www.itworld.com/itwebcast/enterasys_security. 


